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Sponsor’s  surrender  won’t  end  UCITA  battle. 
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When  it  comes  to  privacy,  ‘intelligent 
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A  new  book  by  Computerworld’ s  Dan  Verton  makes  the  chilling  argument  that 
terrorists  are  likely  to  attack  America’s  digital  economy,  yet  the  private  sector 
has  done  little  to  protect  critical  facilities  from  cyber-terrorism.  Page  35 


Microsoft  Plans  Foray  Into 
Web  Services  Management 


BY  CAROL  SLIWA 

Microsoft  Corp.’s  effort  to  be¬ 
come  a  bigger  player  in  the 
systems  management  market 
will  extend  to  Web  services  as 
early  as  next  year,  but  more 
likely  around  2006  with  the 
next  Windows  server  release, 
company  executives  disclosed. 

Eric  Rudder,  senior  vice 


president  of  servers  and  tools 
at  Microsoft,  told  Computer- 
world  that  the  company  plans 
to  have  “compelling  offerings” 
to  help  users  both  manage 
Web  services  and  use  them  to 
manage  their  other  systems. 

Start-ups  have  gotten  the 
early  jump  in  the  fledgling 
Web  services  management 


EMERGING  MARKET 


Web  services 
management  is 
beginning  to  attract 
vendor  attention 

Established  management 
vendors:  CA,  HP,  IBM.  BMC 

Smaller,  pure-play  vendors: 

Actional.  AmberPoint, 
Confluent.  Infravio,  NextAxiom, 
Talking  Blocks,  Swingtide 

market,  but  new  offerings  are 
expected  by  year’s  end  from 
Computer  Associates  Interna¬ 
tional  Inc.  and  Hewlett-Pack¬ 
ard  Co. 

Microsoft  plans  to  enter  the 
Web  services  management 
field  by  using  technology  in  a 
future  version  of  the  Windows 
server  operating  system  and 

Microsoft,  page  49 


IBM,  Bankers  at 
Odds  Over  OS/2 
Migration  Path 

Vendor  advises  OS/2  users  to  switch  to  Linux, 
but  ATM  makers  are  leading  push  to  Windows 


BY  LUCAS  MEARIAN 

IBM,  which  will  end  support 
of  its  aging  OS/2  operating 
system  after  2006,  is  recom¬ 
mending  that  OS/2  customers 
migrate  to  Linux  instead  of 
Windows. 

But  there’s  little  likelihood 
that  IBM’s  advice  will 
be  widely  heeded.  The 
last  bastion  of  OS/2 
computing,  branch 
banking,  is  locked  into  a  Win¬ 
dows  migration  strategy  be¬ 
cause  the  major  manufactur¬ 
ers  of  automated  teller  ma¬ 
chines  are  going  the  OS/2-to- 
Windows  route. 

Wells  Fargo  &  Co.  began  its 
migration  from  OS/2  to  Win¬ 
dows  three  years  ago,  said 
Jonathan  Velline,  senior  vice 
president  of  ATM  banking  at 


the  San  Francisco-based  bank. 
That  move  was  prompted  by 
the  expectation  that  IBM 
would  drop  OS/2  support,  as 
well  as  by  the  need  to  upgrade 
data  encryption  methods 
[QuickLink  40342],  support 
electronic  check-image  proc¬ 
essing  and  provide 
audio  services  for  vi¬ 
sually  impaired  users, 
Velline  said. 

“It’s  easier  for  us  if  we’re 
trying  to  deliver  customer  in¬ 
formation  through  our  teller 
systems  with  Windows,”  he 
said.  The  bank  has  so  far  re¬ 
placed  3,800  of  its  6,200  ATMs 
with  Windows-based  systems 
and  expects  to  complete  the 
migration  by  2005.  Web-en- 
abled  ATMs  could  eventually 
OS/2  Migration,  page  14 
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Jobless  Push  for  Visa  Reform 


Conn,  activist  group 
behind  several  H-1B, 
L-l  bills  in  Congress 

BY  PATRICK  THIBODEAU 

WASHINGTON 

The  controversial  L-l  and  H-1B 
visas  are  under  assault  in  Con¬ 
gress,  in  large  part  because  of 
the  activism  of  a  group  of  laid- 
off  Connecticut  IT  workers. 

Of  the  five  bills  that  have 
been  introduced  this  year  to 
reform  the  two  visa  programs, 
three  were  written  by  Con¬ 
necticut  lawmakers. 


“We’ve  heard  quite  a  bit 
from  constituents  in  our  dis¬ 
trict  concerned  about  losing 
their  jobs,”  said  Lesley  Silla- 
man,  a  spokeswoman  for  Rep. 
Rosa  DeLauro  (D-Conn.),  who 
is  seeking  restrictions  on  L-l 
visa  use. 

The  group  DeLauro  has 
been  working  with,  the  Orga- 
Visa  Reform,  page  49 


The  world's  fastest  personal  computer. 


The  PowerPC  G5  chip. 
The  world's  first  64-bit 
processor  for  personal 
computers. 


The  new  Power  Mac  G5  is  here.  It's  the  world's  fastest*  personal  computer,  and  the 
first  with  a  64-bit  processor.  At  its  heart  are  two  revolutionary  PowerPC  G5  processors, 

running  at  speeds  up  to  2GHz.  And  since  these  are 
64-bit  processors,  they  can  access  up  to  8GB  of 

i 

memory  in  the  Power  Mac  G5,  which  is  double  the 
4-gigabyte  memory  ceiling  of  every  other  PC  in  the  world.  The  G5  processors  also 
have  the  world's  fastest  frontside  bus,  running  at  1  gigahertz,  which  gets  data  to  the 

prOCeSSOr  almOSt  twice  aS  fast  aS  the  533-megahertZ  SPECint_rate2000:  Integer  calculations 

bus  found  in  the  next-fastest  personal  computer  (a 
dual  3.06GHz  Xeon  machine). 


Dual  2GHz  PowerPC  G5 


Dual  3.06GHz  Xeon 


Pentium  4  10.3 


In  side-by-side  speed  tests  using  industry-standard  spEcfP_rate  2000:  Floating-point  calculations 
benchmarks,  the  dual  2.0-gigahertz  Power  Mac  G5  is 

Dual  3.06GHz  Xeon  11.1 

up  to  41%  faster  than  both  the  fastest  Pentium  4  and  3GHz  Pentium  4  &i 

dual-processor  Xeon  workstation.  And  the  results  get  Independent  tests  show  the  Power  Mac 

65  edges  out  the  competition  on  integer 
even  better  when  using  real-world  applications:  and  blasts  past  them  in  floating-point. 

the  new  Power  Mac  G5  runs  Photoshop  more  than  twice  as  fast  as  the  fastest  PCs. 

Further  tests  reveal  there  are  similar  gains  across  a  wide  range  of  applications,  from 

music  and  video  to  science  and  mathematics. 

Impressed?  We  haven't  even  touched  on 


The  PowerPC  G5  chip  is  based 
on  IBM's  highest-performance 
64-bit  supercomputer  processors. 

the  Power  Mac  G5's  other  features.  Like  its  ultrahigh-bandwidth  system  architecture, 
featuring  AGP  8X,  PCI-X,  FireWire”  800,  Gigabit  Ethernet,  up  to  500  gigabytes  (yes, 
that's  half  a  terabyte)  of  internal  Serial  ATA  storage  and  a  SuperDrive- 
for  DVD  authoring.  All  inside  a  stunning,  professional-quality 
aluminum  enclosure  that  features  four  discrete  computer-controlled 
cooling  zones  for  whisper-quiet  operation.  Together,  they  make 
the  Power  Mac  G5  a  true  breakthrough  in  personal  computing. 


TM  and  © 2003  Apple  Computer,  Inc.  All  rights  reserved.  SPEC  is  a  registered  TM  of  the  Standard  Performance  Evaluation  Corp.  IBM  and  PowerPC  are  registered  TMs  of  IBM.  * Performance  claims  based  on  SPEC*  CPU  2000 
benchmark  results  and  leading  professional  application  performance  tests  of  a  dual  2  GHz  Power  Mac  G5  (shown),  3  GHz  Pentium  4-based  Dell  Dimension  8300  and  3.06  GHz  Dual  Xeonbased  Dell  Precision  6S0 
SPEC  CPU  2000  benchmarks  run  with  GCC  3.3  and  independently  tested;  professional  applications  tested  by  Apple,  June  2003.  See  www.specorg  or  www.apple.com/powermac  for  more  information  or  call  1  -800- MY- APPLE 
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Build  a  scalable 
data  warehouse 
with  a  single 
I  point  of  control. 


SAS  is  all  you  need  to  know. 

Only  SAS  provides  a  high-impact,  low-risk  way 
to  achieve  intelligent  data  warehousing.  You  can 
extract,  transform  and  load  data  from  any  source, 
across  any  platform,  while  assuring  quality. 
Simplify  the  way  you  create  and  customize  reports. 
And  deliver  a  shared  version  of  the  truth.  To  find  out 
how  top  companies  reap  bottom-line  rewards  with 
SAS  software — by  leveraging  the  value  of  data 
from  corporate  systems,  e-business  channels,  the 
supply  chain  and  beyond — visit  us  on  the  Web  or  call 
toll  free  1  866  270  5727. 

www.sas.com/warehouse 


The  Power  to  Know, 


SA  fix!  all  cihvr  SAS  Institute  Inc.  product  or  service  names  are  registered  trademarks  or  trademarks  of  SAS  Institute  Inc.  In  the  USA  and  other  countries.  ®  indicates  USA  registration.  O  2002  SAS  Institute  Inc.  All  rights  reserved.  212324US.1102 


IT  Drives  Volkswagen’s  Autostadt 

In  the  Technology  section:  IT  is  at  the  heart  of 
this  automotive  theme  park’s  efforts  to  provide 
each  visitor  with  a  one-of-a-kind  experience 
that  will  eventually  translate  into  the  purchase 
of  a  Volkswagen  brand  car.  Page  23 
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Catering  to  True-blue  Customers 

In  the  Management  section:  More  companies  are  using  cus¬ 
tomer  loyalty  software  to  track  the  patterns  of  repeat  customers 
and  figure  out  how  to  hold  on  to  them  for  the  long  term.  Page  37 
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6  Oracle  will  support  grid  com¬ 
puting  in  new  database  and 
application  server  releases. 

6  Microsoft  offers  Office  users 

a  new  upgrade  option. 

7  The  UCITA  battle  isn’t  over, 

even  though  the  law’s  sponsor 
has  thrown  in  the  towel. 

7  New  privacy  headaches 

could  be  in  store  for  financial 
services  companies,  thanks  to 
a  California  ballot  initiative. 

8  Grocer  Albertsons  consoli¬ 
dates  its  IT  management  tools. 

12  Client-side  products  help 
strengthen  remote-access 
security  systems. 

12  The  Postal  Service  pursues 
plans  for  “intelligent  mail,” 
despite  privacy  concerns. 

13  Avaya  races  to  set  up  a  net¬ 
work  for  the  Women’s  World 
Cup  soccer  tournament. 

13  Telecom  provider  ups  and 

downs:  MCI  wins  approval 
of  its  settlement  of  fraud 
charges,  but  Sprint  may  be 
banned  from  competing  for 
government  contracts. 

15  The  speed  and  reliability  of 

online  banking  sites  varies 
widely,  a  study  shows. 

15  The  securities  industry  needs 
a  jolt  to  revive  enthusiasm  for 
straight-through  processing  of 
stock  trades. 

16  IT  execs  lack  project  manage¬ 
ment  skills,  one  reports  finds. 


26  Piecing  Together  the  Data 
Picture.  Data  quality  goes 
beyond  data  cleansing  and 
transformation;  it  can  be  cru¬ 
cial  to  the  success  of  CRM 
and  ERP  applications. 

28  QuickStudy:  RosettaNet.  This 
emerging  set  of  XML-based 
standards  lets  companies 
align  processes  with  those  of 
trading  partners. 

30  Case  Study:  Averting  an  IT 
Collision.  Liberty  Northwest 
used  Web-to-host  technology 
to  integrate  its  IT  infrastruc¬ 
ture  after  an  acquisition. 

32  Security  Manager's  Journal: 

No  Denying  New  Switch  Vul¬ 
nerability.  Mathias  Thurman 
tries  to  resolve  a  denial-of- 
service  vulnerability  with  min¬ 
imal  disruption  to  his  company. 

MANAGEMENT 

35  Book  Excerpt:  Black  Ice.  In  a 

new  book,  Computerworld’s 
Dan  Verton  says  the  private 
sector  is  in  denial  about  seri¬ 
ous  cyberthreats. 

38  Q&A:  Add  One  CIO  and  Mix 
Well.  After  a  big  financial  scan¬ 
dal,  Tyco  picks  Dana  Deasy  as 
its  first  corporatewide  CIO.  His 
mission:  integrate  the  systems 
of  disparate  business  units. 

39  Q&A:  Global  Laboratory. 

HP’s  “i-communities”  initia¬ 
tive  brings  technology  to  un¬ 
developed  countries,  says  the 
company’s  Debra  Dunn,  who 
wrote  an  article  about  it  in  the 
Harvard  Business  Review. 


8  On  the  Mark:  Mark  Hall  re¬ 
ports  on  an  antispam  service 
that  relies  on  “luckless”  folks 
in  India  who  have  to  read 
every  piece  of  e-mail  caught 
in  a  filter  to  weed  out  the  false 
positives. 

20  Maryfran  Johnson  weeds  out 
some  false  positives  of  her 
own  when  she  cuts  through 
the  buzz  at  Linux  World  to 
find  what  really  matters  to 
corporate  IT. 

20  Pimm  Fox  says  CRM  on  the 
road  is  real,  and  it’s  saving 
companies  serious  money  — 
and  maybe  making  some,  too. 

21  David  Moschella  casts  a 
vote  in  favor  of  offshore  IT 
outsourcing. 

33  Nicholas  Petreley  finds  un¬ 
canny  resemblances  between 
a  SCO  exec  and  lawyer  and 
two  cartoon  mice. 

41  Bart  Perkins  says  careful  and 
regular  pruning  of  your  IT 
vendors  will  reduce  costs  and 
complexity,  and  he  provides 
guidelines  for  doing  it  right. 

50  Frankly  Speaking:  Frank 
Hayes  thinks  Red  Hat’s  law¬ 
suit  against  SCO  may  help  us 
understand  exactly  why  SCO 
is  suing  everyone  in  sight. 
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Offshore  Outsourcing 
Not  Such  a  Threat 

CAREERS:  Ward  Larkin  contends  that  there 
are  numerous  reasons  why  the  gloom-and- 
doom  scenarios  that  many  people  are  spin¬ 
ning  won’t  come  to  pass.  ©  QuickLink  40490 

Bringing  Value  to  an  IT 
Department  Near  You 

DEVELOPMENT:  As  the  fallout  from  the  Inter¬ 
net  bubble  settles,  look  for  companies  to 
transform  their  IT  departments  into  lean, 
effective  and  innovative  organizations. 

©  QuickLink  40390 

Users  Not  Quite  Ready  to  Drink 
Their  Storage  by  the  Glass 

STORAGE:  New  metered  storage  capabilities 
from  EMC  and  Hewlett-Packard  show 
promise  but  haven’t  yet  won  users’  hearts, 
says  this  article  from  SNW  Online. 

©  QuickLink  40385 


Using  NAS  to  Simplify  Backups 

STORAGE:  Dell  Inc.’s  Russ  Holt  takes  a  look  at 
three  scenarios  where  network-attached 
storage  offers  advantages  over  older  backup 
technologies.  ©  QuickLink  39850 


Linux  Package  Managers 

OPERATING  SYSTEMS:  This  excerpt  from 
Linux  in  a  Nutshell  describes  how  to  use 
packaging  systems.  ©  QuickLink  40433 


What’s  a  QuickLink? 

On  some  pages  in 
this  issue,  you’ll  see 
a  QuickLink  code  pointing 
to  additional,  related  con¬ 
tent  on  our  Web  site.  Just 
enter  that  code  into  our 
QuickLink  box,  which 
you'll  see  at  the  top  of 
each  page  on  our  site, 
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Acxiom  Confirms 
Breach  by  Hacker 

Acxiom  Corp.,  which  maintains  a 
database  of  information  about 
consumers,  confirmed  that  a 
hacker  downloaded  a  small 
amount  of  data  as  it  was  being 
transmitted  between  the  company 
and  some  of  its  corporate  clients. 
Little  Rock,  Ark.-based  Acxiom 
said  the  breach  involved  a  file 
transfer  protocol  server  outside 
its  firewall.  The  company  added 
that  a  former  employee  of  an 
Acxiom  client  has  been  arrested. 


Sun  to  Acquire 
Provisioning  Tools 

Sun  Microsystems  Inc.  said  it  has 
signed  a  deal  to  acquire  Center- 
Run  Inc.,  a  Redwood  City,  Calif.- 
based  developer  of  application 
provisioning  software.  Sun  didn’t 
disclose  the  cost  of  the  acquisi¬ 
tion,  which  is  due  to  be  complet¬ 
ed  by  the  end  of  next  month.  Sun 
said  CenterRun  will  become  part 
of  its  software  group  and  expand 
its  N1  data  center  management 
strategy. 


Antitrust  Review 
Ends  on  Palm  Deal 

Palm  Inc.  in  Milpitas,  Calif.,  said 
the  antitrust-related  waiting  pe¬ 
riod  on  its  proposed  acquisition 
of  handheld  device  rival  Hand¬ 
spring  Inc.  has  expired  without 
the  companies  being  asked  to 
provide  more  information  to  fed¬ 
eral  regulators.  Palm  agreed  to 
buy  Mountain  View,  Calif.-based 
Handspring  in  June  [QuickLink 
38997].  The  deal  is  expected  to 
ciose  in  the  fall. 


Short  Takes 

San  Oiego-based  software  ven¬ 
dor  PEREGRINE  SYSTEMS  INC. 
said  it  has  completed  a  Chapter 
11  reorganization  and  emerged 
from  bankruptcy  protection. . . . 
BROADCOM  CORP.  in  Irvine, 
Calif.,  agreed  to  pay  INTEL  CORP. 
S60  million  to  settle  a  series  of 
patent-infringement  lawsuits. 


Oracle  to  Embrace  Grid 
Computing  in  Upgrades 


User  interest  in  upcoming  rollouts 
tempered  by  reliability,  pricing  concerns 


BY  MARC  L.  SONGINI 

T  ITS  ORACLEWORLD 

user  conference  in 
San  Francisco  next 
month,  Oracle  Corp. 
plans  to  take  the  wraps  off  the 
next  generation  of  its  flagship 
database,  which  is  being  up¬ 
graded  to  support  more  exten¬ 
sive  clustering  and  grid-com¬ 
puting  capabilities. 

Oracle  last  week  wouldn’t 
disclose  full  details  about  the 
upcoming  release.  But  Robert 
Shimp,  the  vendor’s  vice  presi¬ 
dent  of  database  marketing, 
said  features  will  be  added  to 
make  it  easier  for  users  to  ex¬ 
ploit  grid  computing  models, 
in  which  applications  are  run 
across  large  numbers  of  rela¬ 
tively  inexpensive  servers. 

The  upgrade  is  being 
dubbed  Oracle  Database  lOg 
and  will  be  accompanied  by 


similarly  named  versions  of 
Oracle’s  application  server 
software  and  Enterprise  Man¬ 
ager  tools.  The  lOg  release  will 
also  include  increased  scala¬ 
bility,  reliability  and  security 
capabilities,  Shimp  said. 

In  addition,  the  three 
products  are  being  developed 
jointly  for  the  first  time.  Ac¬ 
cording  to  Shimp, 
that  should  result 
in  tighter  integra¬ 
tion  and  more 
automated  self¬ 
management  capa¬ 
bilities.  The  soft¬ 
ware  is  in  beta-test¬ 
ing;  a  firm  release 
date  hasn’t  been  fi¬ 
nalized,  he  said. 

Several  Oracle 
users  expressed  in¬ 
terest  in  grid  com¬ 
puting  if  it  lives  up 


to  the  promises  being  made  by 
Oracle  and  other  vendors.  But 
they  noted  that  grid  technol¬ 
ogy  still  faces  some  potential 
roadblocks,  including  reliabili¬ 
ty  and  pricing  concerns. 

For  instance,  IT  staffers  at 
the  California  Public  Employ¬ 
ees  Retirement  System 
(Calpers)  in  Sacramento  are 
facing  tight  budgets  and  might 
use  both  Linux  servers  and 
grid  computing  products  in 
an  effort  to  cut  costs,  said 

Jack  Corrie,  divi¬ 
sion  chief  of  IT 
services  at  the 
pension  fund. 

But  he  added 
that  Calpers  offi¬ 
cials  need  to  do 
their  homework  to 
make  sure  that  an 
emerging  concept 
like  grid  comput¬ 
ing  is  sustainable 
from  a  technology 
standpoint. 

Hal  Kuff,  sys- 


HWe  can’t 
achieve 
ROI  by  licens¬ 
ing  reserve 
capacity  for 
use  three 
hours  a  day. 

HAL  KUFF,  SYSTEMS  AND 
NETWORK  MANAGER,  TESS- 
C0  TECHNOLOGIES  INC. 


Microsoft  Office  Users  Get 
‘Step-Up’  License  Option 


BY  CAROL  SLIWA 

Companies  planning  to  up¬ 
grade  to  the  standard  version 
of  Microsoft  Corp.’s  new  Of¬ 
fice  System  applications  will 
find  a  new  licensing  option  to 
enable  them  to  switch  to  the 
Professional  Edition  at  a  lower 
cost  than  in  the  past. 

Microsoft  announced  last 
week  that  customers  holding 
volume  licenses  with  upgrade 
rights  for  Office  Standard  can 
buy  a  “step-up  license”  to  get 
the  Professional  Edition  by 
merely  paying  the  cost  differ¬ 
ential  for  the  license  plus  the 
Software  Assurance  mainte¬ 
nance  fee.  Under  current 
terms,  customers  must  buy 
new  licenses  to  switch. 

Office  2003  is  due  to  ship 
this  fall,  and  the  new  step-up 
license  option  will  be  available 


beginning  Sept.  1.  The  option 
will  expire  after  a  year. 

Office  product  manager  Si¬ 
mon  Marks  said  Microsoft  is 
offering  the  step-up  license 
because  of  newly  introduced 
differences  in  functionality 
between  the  professional  and 
standard  editions.  He  said  the 
professional  version  has  more 
advanced  XML  capabilities  as 
well  as  information  rights 
management  to  control  access 
to  sensitive  information. 

Deciding  Factors 

Even  Software  Assurance 
holders  for  the  Standard  Edi¬ 
tion  who  don’t  buy  the  step-up 
license  will  be  able  to  upgrade 
to  the  professional  versions  of 
Word,  Excel,  PowerPoint  and 
Outlook  with  the  added  XML 
and  information  rights  capa¬ 


bilities.  To  qualify,  they  must 
have  upgrade  contracts  in 
force  between  Sept.  1, 2003, 
and  March  31, 2004. 

But  they  won’t  get  the  other 
Professional  Enterprise  Edi¬ 
tion  components  —  the  Access 
database,  the  desktop  Publish¬ 
er  tool,  Business  Contact  Man¬ 
ager  and  InfoPath,  a  new  prod¬ 
uct  that  allows  users  to  create 
XML-based  forms  and  submit 
them  to  XML-enabled  systems. 

Analyst  Julie  Giera  at  For¬ 
rester  Research  Inc.  in  Cam¬ 
bridge,  Mass.,  said  Microsoft 
has  added  a  layer  of  complexity 
that  will  make  it  challenging 
for  customers  to  choose  the 
right  Office  version  for  their 
businesses.  “And  this  choice  is 
a  really  important  one  because 
a  licensing  agreement  runs 
three  years,  and  migrations 
are  expensive,”  she  said. 

Users  with  more  pressing 
projects  said  they  won’t  im¬ 
mediately  upgrade  to  Office 
2003.  Others  said  they  plan  to 


terns  and  network  manager  at 
Tessco  Technologies  Inc.  in 
Hunt  Valley,  Md.,  said  Ora¬ 
cle’s  pricing  model  is  a  big 
stumbling  block.  Although 
Kuff  approves  of  the  vendor’s 
technical  direction,  he  said  he 
doesn’t  see  the  point  of  buy¬ 
ing  cheap  Linux  servers  and 
running  them  in  a  cluster  if 
Oracle  is  going  to  charge  a 
premium  price  to  license  its 
software  for  each  CPU  in 
those  systems. 

“We’ve  been  waiting  pa¬ 
tiently  for  them  to  evaluate 
their  per-CPU  licensing  model 
in  a  blade  [server]-type  of  en¬ 
vironment,”  Kuff  said.  “We 
can’t  achieve  ROI  by  licensing 
reserve  capacity  for  use  three 
hours  a  day.  Oracle  needs  to 
make  the  price  right.”  For 
Tessco,  it  now  would  make 
more  economic  sense  to  buy  a 
big  Unix  server,  he  added. 

“Definitely,  the  pricing 
models  of  grid  computing 
have  been  a  big  question  in 
the  minds  of  customers,” 
Shimp  acknowledged.  Oracle 
hasn’t  modified  its  licensing 
policies  thus  far,  “but  we  are 
aware  of  all  the  questions, 
and  we’re  working  on  that,” 
he  said.  I 


upgrade  but  the  new  XML  and 
information  rights  capabilities 
won’t  be  the  main  drivers. 

“We  are  currently  a  mix  of 
[Windows]  2000  and  XP,  and 
want  to  go  to  one  version,”  said 
Stanley  Johnson,  LAN  services 
manager  for  Multnomah 
County,  Ore.  He  said  Office 
2003  may  be  the  convergence 
point,  but  he  isn’t  sure  when.  I 


NEW  FEATURES 

MIC!  - 

Word,  Excel.  Outlook. 
PowerPoint,  Access,  Publisher, 
Outlook  with  Business  Contact 
Manager,  and  InfoPath,  Includes 
additional  support  for  XML  and  in¬ 
formation  rights  management 
content  creation  and  authoring. 

Word,  Excel, 
Outlook,  PowerPoint. 

Note:  Futrfpn 
license  holders. 
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Sponsor’s  Surrender  Won’t  End  UCITA  Battle 

Related  licensing  issues  still  expected 
to  surface  in  new  vendor  contracts 


BY  PATRICK  THIBODEAU 

WASHINGTON 

UCITA  is  far  from  dead  in 
David  Lewis’  world.  The  CIO 
of  Deseret  Mutual  Benefits 
Administrators  in  Salt  Lake 
City  continues  to  see  the  act’s 
provisions  —  including  a  ven¬ 
dor’s  right  to  remotely  disable 
users’  software  —  appearing 
in  software  contracts  he’s 
asked  to  sign. 

And  Lewis  said  he  doesn’t 
expect  that  to  change  as  a  re¬ 
sult  of  the  decision  last  week 
by  the  National  Conference  of 
Commissioners  on  Uniform 
State  Laws  (NCCUSL)  to  pull 
the  plug  on  its  stalled  push  for 
state-by-state  adoption  of  the 
controversial  software  licens¬ 
ing  law. 

“I  think  software  licensing 
will  be  an  ongoing  battle,”  said 
Lewis. 

At  its  annual  meeting  here 
last  week,  the  Chicago-based 
NCCUSL  said  it  couldn’t  over¬ 
come  the  “wide-ranging  oppo¬ 
sition”  that  stymied  adoption 
of  the  Uniform  Computer  In¬ 
formation  Transactions  Act 
(UCITA)  beyond  its  passage  by 
Virginia  and  Maryland  in  2000. 

Although  it  won’t  spend  any 
more  time  or  money  backing 
UCITA,  the  NCCUSL  will 
continue  to  support  it.  For  that 
reason  and  others,  UCITA  will 
remain  a  force  in  software 
contract  licensing  and  some¬ 
thing  corporate  IT  managers 
will  have  to  deal  with  for 
years,  say  people  on  both  sides 
of  the  issue. 

First,  UCITA  is  the  law  in 
Maryland  and  Virginia,  and 
vendors  can  choose  those 
states  as  the  governing  law  in 
a  software  contract,  even  if  the 
vendor  and  user  are  located  in 
different  states. 

Second,  in  the  absence  of  a 
uniform  law  governing  soft- 


UCITA  IN-DEPTH 

To  read  more  on  this  subject,  go  to  our 
UCITA  Special  Coverage  page: 

QuickLink  a1690 
www.computerworld.com 


ware  licensing  and  online  con¬ 
tracting,  it  will  be  up  to  the 
courts  to  sort  out  licensing  is¬ 
sues,  such  as  whether  licens¬ 
ing  agreements  for  packaged 
software  are  enforceable.  And 
the  courts  can  use  UCITA  as  a 
blueprint  to  craft  decisions. 

“It  remains  a  source  of  law,” 
said  Jean  Braucher,  a  law  pro¬ 
fessor  at  the  University  of  Ari¬ 
zona  in  Tucson. 

Moreover,  there’s  nothing  to 
stop  vendors  from  seeking 
state  UCITA  adoptions  with¬ 
out  the  help  of  the  NCCUSL. 

With  those  rounds  incom¬ 
ing,  the  Washington-based 
group  spearheading  opposi¬ 
tion,  Americans  for  Fair  Elec- 


Ballot  initiative, 
judge’s  ruling  may 
reach  beyond  Calif. 

BY  JAIKUMAR  VIJAYAN 

A  consumer-privacy-related 
ballot  initiative  by  a  political 
group  in  California  could 
complicate  matters  for  finan¬ 
cial  services  companies  that 
are  already  scrambling  to 
comply  with  other  regional 
and  federal  privacy  mandates. 

And  just  like  the  recently  in¬ 
stituted  California  state  priva¬ 
cy  law  SB  1386  [QuickLink 
39515],  the  proposed  ballot 
measure  will  have  a  nationwide 
reach,  privacy  experts  said. 

A  group  called  Californians 
for  Privacy  Now  on  July  30  an¬ 
nounced  that  it  had  collected 
more  than  550,000  signatures 
supporting  a  ballot  initiative 
that  would  require  financial 
services  companies  to  get  ex¬ 
plicit  opt-in  permissions  from 
consumers  before  sharing 
their  personal  information 
with  third  parties. 

The  issue  is  expected  to  be 


tronic  Commerce  Transac¬ 
tions  (AFFECT),  will  continue 
the  battle.  “I  think  we’re  going 
to  remain  vigilant,”  said  Miri¬ 
am  Nesbit,  president  of  the 
group  and  legislative  counsel 
at  the  American  Library  Asso¬ 
ciation  in  Washington. 

AFFECT  will  meet  next 
month  to  plot  its  course.  One 
option  is  continuing  a  push  for 


voted  on  in  a  March  2004  bal¬ 
lot  unless  a  compromise  is 
worked  out  before  then. 

The  privacy  group’s  an¬ 
nouncement  came  one  day  af¬ 
ter  a  U.S.  District  Court  judge 
in  Oakland  upheld  sections  of 
three  San  Francisco  Bay  area 
privacy  ordinances  that  re¬ 
quire  banks  to  get  consumers’ 
permission  before  giving  infor¬ 
mation  to  unaffiliated  parties. 

Such  developments  could 
mean  a  lot  of  headaches  for  fi¬ 
nancial  services  companies, 
said  Charlene  Brownlee,  an  at¬ 
torney  at  Fulbright  &  Jaworski 
LLC  in  Austin. 

“The  problem  when  states 
start  enacting  legislation  in 
sectors  already  covered  by 
federal  legislation  is  that  com¬ 
panies  have  to  comply  with  a 
patchwork  of  laws  rather  than 
a  single,  comprehensive  set  of 
obligations,”  she  said. 

Though  the  federal  Gramm- 
Leach-Bliley  Act  allows  states 
to  enact  laws  that  are  stronger 
than  federal  privacy  statutes, 
“laws  varying  from  state  to  state 
create  a  logistical  and  expen- 


so-called  bomb-shelter  legisla¬ 
tion  intended  to  prevent  ven¬ 
dors  from  applying  Maryland’s 
or  Virginia’s  UCITA  provi¬ 
sions  in  another  state.  Ver¬ 
mont,  Iowa,  North  Carolina 
and  West  Virginia  have  adopt¬ 
ed  that  preventive  legislation. 

Chuck  Morton,  an  attorney 
at  Venable  LLP  in  Baltimore 
who  helped  win  Maryland’s 


sive  nightmare  for  companies” 
that  have  already  spent  millions 
on  compliance,  Brownlee  said. 

Opt-in  provisions  like  the 
one  being  proposed  by  the 
California  privacy  group  are  a 
welcome  step,  but  they  need 
to  be  made  part  of  a  wider  fed¬ 
eral  privacy  mandate,  said 
Michael  Overly,  a  partner  at 
Foley  &  Lardner,  a  Los  Ange¬ 
les  law  firm. 

“The  problem  when  you 
have  a  checkerboard  of  rules 
is  that  it  becomes  incredibly 


The  problem 
when  you  have 
a  checkerboard  of 
rules  is  that  it  be¬ 
comes  incredibly 
hard  for  companies 
to  figure  out  and 
keep  track  of  what 
needs  to  be  done. 


MICHAEL  OVERLY,  PARTNER. 
FOLEY  & LARDNER 


adoption  of  UCITA,  said  he 
believes  the  lack  of  court  chal¬ 
lenges  over  implementation  of 
UCITA  in  Virginia  and  Mary¬ 
land  is  evidence  that  the  law 
“isn’t  as  revolutionary  as 
either  camp  would  have  led 
you  to  believe.” 

Uniform  commercial  law 
usually  evolves  from  generally 
accepted  businesses  practices, 
but  neither  side  in  this  battle 
agrees  on  those  practices. 

“Few  disagree  that  the  cur¬ 
rent  Uniform  Commercial 
Code  is  ill-suited  for  use  with 
licensing  and  other  intangible 
transactions,”  said  Alan  Fisch, 
an  intellectual  property  attor¬ 
ney  at  Howrey  Simon  Arnold 
&  White  LLP  in  Washington. 
“But  for  any  new  uniform 
code  to  be  an  effective  solu¬ 
tion,  there  must  be  wide¬ 
spread  acceptance  of  its  un¬ 
derlying  principles;  which  is 
not  true  of  UCITA.”  I 


hard  for  companies  to  Figure 
out  and  keep  track  of  what 
needs  to  be  done,”  he  said. 

Despite  the  level  of  concern 
raised  by  California’s  SB  1386, 
for  instance,  many  companies 
both  inside  the  state  and  out 
don’t  understand  its  scope  or 
what  needs  to  be  done  to  com¬ 
ply,  Overly  said. 

Financial  services  Firms  in 
California  can  expect  some 
sort  of  restrictions  on  the  use 
of  customer  data  by  mid-2004, 
according  to  a  Gartner  Inc. 
note  on  the  ballot  initiative. 

Financial  services  compa¬ 
nies  around  the  country  should 
view  these  developments  with¬ 
in  a  state  as  large  as  California 
as  indicative  of  a  national  trend, 
the  Gartner  report  added. 

But  instead  of  trying  to 
comply  with  such  laws  one 
state  at  a  time,  it  might  make 
sense  for  companies  to  com¬ 
ply  with  the  “strongest  state 
legislation”  related  to  privacy, 
Brownlee  said. 

Wachovia  Corp.  in  Char¬ 
lotte,  N.C.,  is  doing  just  that. 

“We  are  taking  the  stance 
that  if  we  have  to  notify  anyone 
in  California  we  will  do  that  in 
other  states  as  well,”  said  Luis 
Suarez,  vice  president  of  PKI 
and  encryption  key  manage¬ 
ment  at  Wachovia.  D 


Why  did  the  NCCUSL  decide  to  end  its 
push  for  state  adoptions?  The  organiza¬ 
tion,  which  is  funded  by  the  states  to  craft 
uniform  commercial  laws,  was  outgunned 
by  a  savvy  and  potent  network  of  lobby¬ 
ists  representing  the  insurance  industry  and  library  groups,  in  particular. 

Are  there  concrete  examples  of  the  opponents’  effectiveness?  A  good 
one  is  the  fact  that  www.ucita.com  is  the  opponents’  Web  site. 

What  does  this  mean  for  the  future  of  UCITA?  The  courts  will  shape 
future  licensing  rules,  but  UCITA  may  well  turn  out  to  be  a  blueprint 
for  future  decisions. 


New  Privacy  Rules  Could  Mean 
Headaches  for  Financial  Services  IT 
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EG  Details  Microsoft 
Antitrust  Remedies 


The  European  Commission  out¬ 
lined  a  series  of  proposed  anti¬ 
trust  remedies  against  Microsoft 
Corp.  and  said  the  company  may 
be  fined  as  much  as  10%  of  its 
annual  worldwide  sales.  The  com¬ 
mission  sent  Microsoft  an  updat¬ 
ed  “statement  of  objections”  de¬ 
tailing  alleged  monopoly  abuses 
by  the  vendor.  Microsoft  said  it’s 
studying  the  document  “and  will 
continue  to  work  toward  a  posi¬ 
tive  resolution  of  these  issues.” 


Equifax,  IBM  Sign 
Expanded  IT  Deal 

Equifax  Inc.,  an  Atlanta-based 
company  that  compiles  credit  re¬ 
ports  and  sells  business  manage¬ 
ment  tools,  said  it  has  expanded 
an  IT  services  deal  under  which 
IBM  manages  its  mainframes, 
midrange  servers  and  networks. 
The  new  10-year  contract  is  glob¬ 
al  in  scope  and  is  worth  $400 
million,  increasing  the  total  value 
of  the  deal  between  the  two  com¬ 
panies  to  $800  million. 


Intel  May  Owe 
$600M  in  Taxes 

Intel  Corp.  has  been  notified  by 
the  Internal  Revenue  Service  that 
it  may  have  to  pay  $600  million  in 
back  taxes  for  1999  and  2000.  In 
a  regulatory  filing,  Intel  said  that 
the  IRS  is  proposing  adjustments 
to  tax  benefits  taken  by  the  com¬ 
pany  on  export  sales  and  that  it 
may  make  similar  claims  for  sub¬ 
sequent  years.  Intel  said  it  dis¬ 
putes  the  proposed  charges. 


Short  Takes 

ASCENTIAL  SOFTWARE  CORP.  in 
Westboro,  Mass.,  announced  a 
$106  million  deal  to  buy  Mercator 
Software  Inc.,  a  Wilton,  Conn., 
vendor  of  application  integration 
software. . . .  AGILE  SOFTWARE 
CORP.  in  San  Jose  said  it’s  buying 
Waltham,  Mass.-based  Eigner  Inc. 
for  an  undisclosed  price,  combin¬ 
ing  two  makers  of  product  life- 
cycle  management  tools. 


MARK  HALL  ■  ON  THE  MARK 

Spam  +  Outsourcing  = 
Peace  of  Mind . . . 

. . .  for  e-mail  users,  according  to  Ashok  Kalle,  president  of  Pathway 
Communications  in  Toronto.  He  claims  that  better  than  99%  of  spam 
can  be  filtered  by  a  combination  of  his  company’s  NetPulse  appliance, 
which  becomes  generally  available  on  Aug.  15,  and  an  optional  $l-per- 
month-per-mailbox  service  that  employs  workers  in  India  who  review 
every  single  piece  of  spam  sequestered  from  a  mail  queue  by  the  spam 
filter.  “It’s  fairly  easy  for  a  trained  individual  to  figure  out  what  spam 
is,”  he  says.  “We  want  to  offer  another  filter  layer  not  to  catch  spam, 


which  the  appliance  does,  but  to  catch 
false  positives.”  For  anyone  who  has 
missed  an  important  message  due  to  a 
strict  spam  filter,  this  could  be  a  big  plus. 
NetPulse  is  based  on  the  open-source 
Spam  Assassin  software  combined  with 
Pathway’s  proprietary  filtering  technolo¬ 
gy  and,  of  course,  those  luckless  folks  in  In¬ 
dia.  ■  Pathway  Communications  is  also  a 
vendor  of  the  oft-maligned  intrusion-de¬ 
tection  system  (IDS).  IDSs  are  widely 
known  to  send  so  many 
alerts  that  network  ad¬ 
mins  end  up  ignoring 
them,  which  can  lead  to 
trouble,  since  some  alerts 
should  be  acted  upon. 

That’s  why  Guidance 
Software  Inc.  in  Pasade¬ 
na,  Calif.,  has  come  up 
with  a  product  called 
EnCase  Enterprise, 
which  can  receive  an 
alert  and,  according  to 
CEO  John  Patzakis, 

“quickly  look  at  the  bi¬ 
naries  that  caused  the 
alert  to  see  if  the  system 


has  been  hacked.”  EnCase  looks  at  every 
sector  on  a  hard  drive’s  platters  and  can 
identify  crackers’  tools,  renamed  files 
and  other  telltale  signs  that  something  is 
amiss  with  the  drive.  Next  week  the  com¬ 
pany  will  unveil  new  features  in  the  4.15 
upgrade.  The  most  significant  is  that  IT 
security  staffs  can  now  scan  drives  across 
local-  or  wide-area  networks.  Previously,  the 
security  software  had  to  run  locally  on 
the  suspect  system.  EnCase  lets  users  de¬ 
termine  exactly  how  a 
file  got  onto  a  drive, 
which  can  be  helpful  in 
situations  where  litiga¬ 
tion  is  involved.  Erased 
files  can  be  recovered 
and  “hidden  partitions” 
found,  claims  Patzakis. 
That  puts  a  damper  on 
corporate  espionage 
and  even  rogue  busi¬ 
nesses  that  are  using 
company  technology, 
such  as  one  unnamed 
customer’s  IT  workers 
who  were  caught  by 
EnCase  augmenting 


their  salaries  by  running  a  porn  site  from 
the  data  center.  Pricing  starts  at  $2,500.  ■ 
Ken  Boyd,  CIO  of  the  Remedy  division  of 
Houston-based  BMC  Software  Inc.,  has 
some  advice  for  IT  executives  in  the 
midst  of  an  acquisition:  Don’t  let  one  IT 
group  force  its  ways  on  the  newly 
merged  organization.  He  should  know.  In 
less  than  two  years,  he  went  through  a 
botched  acquisition  by  San  Diego-based 
Peregrine  Systems  Inc.  and  what  he  calls 
a  successful  one  by  BMC.  In  fact,  he  goes 
so  far  as  to  say  that  Peregrine’s  strategy  to 
force  an  inferior,  albeit  corporate,  standard 
technology  on  Remedy  was  “a  contribut¬ 
ing  factor”  to  the  resale  of  Remedy  to 
BMC.  What  BMC  has  done  right,  he  says, 
is  to  pick  the  best  technologies  from  both 
operations.  Also,  he  says  BMC  has  been 
“more  focused  on  business  policies  and 
not  a  desire  to  control,”  which  was  not 
the  case  with  Peregrine.  ■  Eric  Raymond, 
author  of  the  seminal  work  on  open-source 
technology  The  Cathedral  and  the  Bazaar, 
has  released  a  “beta”  (Version  0.82)  of 
his  much  anticipated  book  The  Art  of 
Unix  Programming.  While  not  exactly  a 
coder  call  to  arms,  the  book  does  argue 
that  the  operating  system’s  original  in¬ 
tent  as  a  “general-purpose  timesharing 
system ...  is  rapidly  receding  into  the 
mists  of  history.”  Nonetheless,  the  “peer- 
review-intensive  development  of  freely 
shared  source  code”  philosophy  of  Unix’s 
adherents  is  the  foundation  for  open- 
source  technologies.  Attempts  by  Unix 
vendors  to  eschew  open-source  practices 
have  hurt  the  OS,  making  Linux  “the  last 
best  hope  to  fulfill  the  rebel  dreams  of  early 
Unix  days.”  His  publisher,  Addison-Wes- 
ley,  expects  copies  of  the  manifesto  to 
arrive  in  bookstores  in  September.  Oh, 
and  there  are  hundreds  of  pages  of  in¬ 
structive  text  for  more  apathetic  pro¬ 
grammers  who  just  want  to  hack  the 
system.  I 


Bothell,  Wash.-based  Oexterra 
Inc.  promises  that  field  service 
technicians  with  Pocket  PCs  or 
Windows  Tablets  will  get  im¬ 
proved  wireless  access  to  back¬ 
end  applications  such  as  CRM 
and  ERP  systems;  better  work- 
flow  operations;  new  print  ser¬ 
vices  with  Bluetooth  mobile 
printers;  and  zippier  perfor¬ 
mance,  when  it  ships  Dexterra 
Field  Service  2.0  late  in  the  third 
quarter.  Pricing  hasn’t  been  set. 


Grocer  Consolidates  IT  Management  Tools 


BY  MATT  HAMBLEN 

Albertsons  Inc.  today  will  an¬ 
nounce  that  it’s  close  to  finish¬ 
ing  a  rollout  of  Marimba  Inc.’s 
desktop  and  server  manage¬ 
ment  software  throughout  the 
2,300  food  and  drug  retail 
stores  it  operates  in  31  states. 

Albertsons  began  deploying 
the  software  in  March  for 
tracking  IT  assets  and  making 
automated  software  changes 
to  tens  of  thousands  of  de¬ 
vices,  including  servers,  desk¬ 
top  and  laptop  PCs,  and  point- 
of-sale  terminals,  said  Kia 


Behnia,  chief  technology  offi¬ 
cer  at  Mountain  View,  Calif.- 
based  Marimba. 

Jeff  Tibbitts,  an  IT  project 
manager  at  Boise,  Idaho-based 
Albertsons,  said  the  rollout  is 
scheduled  to  be  done  by  mid- 
September.  “Getting  a  handle 
on  our  hardware  and  software 
is  important,”  Tibbitts  said. 
“We  had  a  variety  of  automat¬ 
ed  tools  and  manual  processes 
in  the  past,  so  this  is  an  effort 
to  consolidate  all  of  that.” 

He  added  that  Albertsons, 
which  had  revenue  of  $35.6  bil¬ 


lion  in  the  fiscal  year  that 
ended  Jan.  30,  will  also  use 
Marimba’s  software  to  auto¬ 
mate  the  deployment  and 
management  of  antivirus  soft¬ 
ware  and  security  patches. 

Fred  Broussard,  an  analyst 
at  IDC  in  Framingham,  Mass., 
said  Marimba  has  struggled 
in  the  management  software 
market  against  vendors  like 
IBM’s  Tivoli  Software  unit  and 
Computer  Associates  Interna¬ 
tional  Inc.  “Marimba  is  in  a 
race  with  the  big  guys,  and 
this  is  a  market  where  it  is  in¬ 


creasingly  hard  [to  compete],” 
he  said. 

But  retailers  make  up  a  large 
part  of  Marimba’s  user  base, 
and  Tibbitts  said  Albertsons 
chose  that  vendor  over  Tivoli, 
CA  and  other  rivals  because 
its  software  can  scale  across 
the  grocer’s  operations  and  is 
flexible  enough  to  track  vari¬ 
ous  hardware  platforms  and 
up  to  350  applications. 

Albertsons  also  expects  to 
get  a  return  on  its  investment 
through  improved  efficiencies 
within  11  months  of  complet¬ 
ing  the  Marimba  installation, 
Tibbitts  said.  He  wouldn’t  dis¬ 
close  the  cost  of  the  project.  I 


monitor  not  included 


HP  COMPAQ  d330 
SLIM  TOWER 

Starting  at: 
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Intel®  Pentium®  4  processor  2.40  GHz 

Small  footprint  design  for  limited  space 
environments 

Form  factor  can  be  used  as  a  desktop 
or  minitower 

Microsoft®  Windows®  XP  Pro 
Enhanced  serviceability  with  tool-less  access 
3-Year  Parts/  1-Year  Labor/  1-Year  On-site** 
Optional  HP  Drive  Key  (64MB)  mobile 
storage  solution 


No  matter  how  you  look  at  it,  you're  better  off  replacing  your  aging  PCs  than 
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return  on  IT,  as  well  as  the  reliability,  service  and  support  you  get  with  any  HP  product. 


Upgrade  your  business  with  help  from  HP. 

To  learn  more,  call  your  HP  sales  representative 
or  visit  www.hp.com/go/pcupgrade3. 

HP  PC  MIGRATION  SERVICE 

Need  help  with  all  the  tasks  associated  with  upgrading  to  new  PCs? 
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Manages  storage  resources  to  meet  changing  demand.  On  demand. 
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The  human  body  has  an  amazing  capacity  to  adapt  to  shifting 
demands.  So  do  IBM  TotalStorage  products.The  IBM  TotalStorage 
Virtualization  Family  manages  your  individual  storage  resources 
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TotalStorage:  storage  for  on  demand  business. 
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New  Products  Bolster 
Remote  System  Security 

Managers  turn  focus  to  client-side  risks 


BY  JAIKUMAR  VIJAYAN 

ISING  CONCERNS 
that  remote  comput¬ 
ers  could  compro¬ 
mise  network  secu¬ 
rity  are  prompting  some  com¬ 
panies  to  lock  down  such  sys¬ 
tems  and  enforce  strict  com¬ 
pliance  with  remote  access 
security  policies.  And  several 
vendors  are  stepping  up  with 
products  to  help. 

Fremont,  Calif.-based  Sygate 
Technologies  Inc.  next  week 
will  roll  out  an  upgraded  ver¬ 
sion  of  its  Sygate  Secure  En¬ 


terprise  suite  with  new  func¬ 
tions  for  automating  and  en¬ 
forcing  security  policies  on  re¬ 
mote  systems  that  are  used  to 
dial  into  corporate  networks. 

Rival  InfoExpress  Inc.  in 
Mountain  View,  Calif.,  later 
this  month  will  roll  out  a  simi¬ 
lar  product  with  support  for 
multiple  remote  client  hard¬ 
ware  types  and  operating  sys¬ 
tems.  And  San  Francisco- 
based  personal  firewall  ven¬ 
dor  Zone  Labs  Inc.  on  July  30 
started  shipping  Integrity  4.0, 
a  centrally  managed  endpoint, 


or  client-side,  security  suite 
with  a  component  for  enforc¬ 
ing  security  policies  on  all  vir¬ 
tual  private  network-connect¬ 
ed  corporate  network  users. 

The  goal  of  using  such  soft¬ 
ware  is  to  ensure  that  remote 
workers  don’t  compromise 
network  integrity  by  using  im¬ 
properly  secured  systems,  said 
Kenneth  Tyminski,  CIO  at 
Prudential  Financial  in  New¬ 
ark,  N.J. 

“To  me,  it’s  all  about  con¬ 
trolling  endpoint  security,” 
said  Tyminski. 

“Basically,  such  products  al¬ 
low  you  to  specify  what  appli¬ 
cations,  what  programs  and 


what  configurations  should  be 
available  on  a  [remote]  sys¬ 
tem,”  said  Jim  Kirby,  senior 
network  engineer  at  Wells’ 
Dairy  in  Le  Mars,  Iowa. 

Prudential  has  rolled  out 
Sygate’s  software  to  20,000 
employees  who  either  are 
mobile  or  remotely  access  the 
company’s  networks  on  a  part- 
time  or  full-time  basis. 

Sygate’s  agent  software, 
which  serves  as  a  personal 
firewall,  sits  on  each  remote 
device  and  ensures  that  the 
right  configuration  and  secu¬ 
rity  settings  are  in  place  at  all 
times,  especially  when  the 
computer  isn’t  connected  to 
the  corporate  network. 

The  software,  for  instance, 
can  recognize  when  a  remote 
worker’s  system  is  connected 
to  the  Internet  and  automati¬ 
cally  shuts  down  ports  and 
functions  that  could  be  used 


Postal  Service  Pursues  Intelligent 
Mail’  Despite  Privacy  Concerns 


Critics  decry  use 
in  antiterror  efforts 


BY  DAN  VERTON 

WASHINGTON 

A  presidential  commission 
tasked  with  studying  ways  to 
make  the  U.S.  Postal  Service 
(USPS)  more  efficient  has  rec¬ 
ommended  that  it  work  with 
the  Department  of  Homeland 
Security  to  develop  sender 
identification  technology  for 
all  U.S.  mail. 

In  its  final  report,  released 
July  31,  the  President’s  Com¬ 
mission  on  the  U.S.  Postal  Ser¬ 
vice  said  sender  identification 
technologies  such  as  personal¬ 
ized  stamps  that  embed  digital 
identification  information 
would  not  only  improve  USPS 
tracking  and  delivery  opera¬ 
tions,  but  would  also  enhance 
the  security  of  the  mail  system. 

But  civil  liberties  groups 
and  even  some  private-sector 
technologists  fear  that  requir¬ 
ing  what’s  being  called  “intel¬ 
ligent  mail”  for  all  users  of  the 
postal  system  is  overreacting 
to  the  terrorism  threat. 


Ron  Quartel,  CEO  of  Freight- 
Desk  Technologies  Inc.,  a 
Dunn  Loring,  Va.-based  com¬ 
pany  that  develops  technolo¬ 
gies  for  the  shipping  industry, 
said  intelligent  mail  wouldn’t 
likely  have  much  impact  on 
commercial  mailers  because 
most  commercial  transactions 
are  already  semipublic.  It 
would,  however,  have  a  “huge 
dampening  effect”  on  the  per¬ 
sonal  use  of  mail,  he  said. 

“There  are  no  obvious  tech¬ 
nological  barriers  to  the  postal 
commission  suggestion,”  said 
Quartel.  “But  do  Americans 
really  want  every  facet  of  their 


lives  inventoried  by  a  federal 
bureaucrat?  I  don’t.” 

The  focus  on  security  stems 
from  the  2001  anthrax  attacks 
that  took  advantage  of  the 
anonymity  of  the  mail  system. 

The  USPS  in  January  formed 
a  committee  with  the  help  of 
the  private  sector  to  begin 
studying  intelligent-mail  tech¬ 
nologies  and  infrastructure  re¬ 
quirements  and  has  since  es¬ 
tablished  a  corporate  plan  for 
intelligent-mail  implementa¬ 
tion.  That  plan  includes  analy¬ 
sis  of  IT  infrastructure  up¬ 
grades,  such  as  server  consoli¬ 
dation,  that  are  necessary  to 


begin  the  program.  However,  it 
is  unclear  if  the  USPS  plan  en¬ 
visions  the  mandatory  use  of 
intelligent  mail  for  all  USPS 
customers  as  the  commission 
recommended.  A  spokesman 
for  the  USPS  said  the  commis¬ 
sion  report  is  still  under  review 
and  it  would  be  premature  to 
discuss  future  USPS  plans. 

However,  the  USPS  intends 
to  award  a  contract  in  Novem¬ 
ber  for  mobile  data  collection 
devices  that  could  serve  as  in¬ 
telligent  mail  scanners. 

Ari  Schwartz,  associate  di¬ 
rector  of  The  Center  for 
Democracy  and  Technology  in 
Washington,  said  intelligent 
mail  was  created  as  a  commer¬ 
cial  tool  to  boost  efficiency.  But 
to  use  it  as  a  homeland  security 
tool  raises  legitimate  privacy 
concerns,  Schwartz  said.  “The 
anonymity  of  the  mail  is  some¬ 
thing  that  the  Postal  Service 
has  been  proud  of,”  he  said. 
“The  history  of  the  country  is 
such  that  we  want  people  to 
be  able  to  speak  anonymously, 
and  taking  away  [anonymous 
mail]  altogether  does  not 
seem  to  be  a  good  idea.”  I 


STAVING  OFF  IRRELEVANCE 

The  presidential  commission  recommended 
a  range  of  reforms  at  the  USPS: 

QuickLink  40387 
www.computerworld.com 


Like  this  Canada  Post  sample,  intelligent  mail  would  incorporate  data-rich, 
machine-readable  markers  to  make  each  piece  unique  and  trackable. 


New  Endpoi  t 
Security  Products 


Sygate  Secure  Enterprise  3.0: 
Comprises  a  client-side  security 
agent  on  each  device,  an  enforce¬ 
ment  server  for  ensuring  compli¬ 
ance  and  a  management  server. 

Zone  Labs  Integrity  4.0: 
Provides  centralized  security  policy 
implementation  and  administration. 

InfoExpress  CyberArmor 
Personal  Firewall  and  Cyber- 
Gatekeeper:  Controls  access 
to  networks  based  on  remote 
system  audit. 

(Vote:  License  fees  for  such  software  wy 
widely  by  hstafetten  sfcs.  Per-seai  costs 
can  range  from  a  low  of  around  $50  for  wy 
large  installations  to  around  $100. 


to  download  malicious  code 
on  the  system. 

Each  time  a  remote  worker 
attempts  to  access  the  corpo¬ 
rate  network,  a  Sygate  en¬ 
forcement  server  first  checks 
with  the  agent  on  the  user’s 
system  and  ensures  that  the 
device  meets  all  policy  re¬ 
quirements  such  as  having 
functioning  firewalls,  an¬ 
tivirus  software,  proper  patch 
levels  and  registry  settings. 

“We  want  to  make  sure  that 
when  the  machine  is  connect¬ 
ed  to  us,  it  is  in  a  trusted  state 
with  all  the  appropriate  pro¬ 
tections,”  Tyminski  said.  Ma¬ 
chines  that  aren’t  compliant 
have  access  blocked  until 
remedial  action  is  taken. 

Thomson  Corp.’s  Medstat 
Group  in  Ann  Arbor,  Mich., 
requires  all  PCs  with  Internet 
access  to  run  a  personal  fire¬ 
wall,  antivirus  software  and  a 
program  that  scans  for  mali¬ 
cious  activity.  The  company 
has  installed  InfoExpress’ 
CyberArmor  technology  on 
175  remote  systems.  An  en¬ 
forcement  component  called 
CyberGatekeeper  ensures  that 
no  one  has  uninstalled  the 
firewall  or  other  protections. 

“Remote  users  can  uninstall 
or  stop  services  on  most  of  the 
software  on  their  PC.  In  doing 
so,  they  will  not  gain  access 
to  our  VPN  server  or  our  net¬ 
work,”  said  Lee  Wolf,  a  net¬ 
work  engineer  at  Thomson 
Medstat. ) 
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Avaya  Rushes  to  Set  Up 
Women’s  World  Cup  Network 


Last-minute  move  of  soccer  tourney 
to  the  U.S.  poses  challenges  for  IT  staff 


BY  MATT  HAMBLEN 

With  the  SARS  virus  forcing 
soccer  officials  to  move  this 
year’s  Women’s  World  Cup  fi¬ 
nals  from  China  to  the  U.S.  at 
the  eleventh  hour,  workers  at 
Avaya  Inc.  are  scrambling  to 
set  up  a  promised  voice  and 
data  network  in  time  for  the 
tournament. 

The  16-team  tournament  is 
scheduled  to  start  Sept.  20, 
and  Avaya  wasn’t  given  the 
locations  of  the  six  stadiums 
being  used  in  the  U.S.  or  the 
final  network  requirements 
until  July  13.  Doug  Gardner, 
managing  director  of  the 
World  Cup  technical  program 
at  Avaya,  said  that  in  contrast, 
network  preparations  had 
been  under  way  in  China  for 
more  than  a  year  before  the 
Federation  Internationale  de 
Football  Association  (FIFA) 
decided  in  May  to  move  the 
finals  to  the  U.S.  because  of 
the  SARS  outbreak. 

“The  relocation  has  posed 
many  significant  logistical 
challenges,  [but]  I  am  happy  to 
report  we  are  on  track,”  said 
Michael  Kelly,  head  of  IT  solu¬ 
tions  at  FIFA,  the  sport’s  gov¬ 
erning  body.  When  the  deci¬ 
sion  to  move  the  games  to  the 
U.S.  was  announced,  “Avaya 
sprung  into  action,”  Kelly  said. 

Basking  Ridge,  N.J.-based 
Avaya  will  reuse  much  of  the 
switching  equipment  it  de¬ 
ployed  for  the  Men’s  World 
Cup  finals  that  were  held  in 
Japan  and  South  Korea  last 


Correction 

In  a  box  profiling  Huntington 
Bancshares  Inc.  that  was  includ¬ 
ed  with  the  Aug.  4  Management 
section  feature  “Breaking  the 
Paper  Habit,"  the  bank  holding 
company's  2002  sales  total  was 
incorrect.  The  correct  figure  is 
$2.2  billion. 


summer,  Gardner  said.  The 
network  for  that  tournament 
supported  a  total  of  about 
40,000  devices  and  120,000 
connections  [QuickLink  31110]. 

Clay  Sutton,  a  vice  presi¬ 
dent  of  network  consulting  at 
Avaya,  estimated  that  the  net¬ 
work  needs  for  the  Women’s 
World  Cup  will  be  about  one- 
third  what  they  were  for  the 
men’s  finals,  which  involved 
32  teams  and  20  stadiums.  In 
addition  to  the  devices  that 
are  being  reused  from  last 
year,  some  new  cabling  and 
switching  gear  was  ordered 
in  July,  Sutton  said. 

That  equipment  was  due  to 


begin  arriving  late  last  week 
at  Avaya’s  network  operations 
center  in  St.  Petersburg,  Fla. 
Workers  at  the  operations  cen¬ 
ter  will  monitor  the  network 
for  the  duration  of  the  32- 
match  tournament,  which  will 
culminate  in  the  champion¬ 
ship  Oct.  12  in  Los  Angeles. 


AVAYA  is  installing  LANs  at  six  U.S.  stadiums  for 
the  upcoming  Women’s  World  Cup,  which  will  host 
16  teams,  including  Mia  Hamm’s  U.S.  squad. 


Avaya  also  will  install  one  of 
its  S8700  switches  at  the  West- 
in  Hotel  in  Long  Beach,  Calif., 
where  FIFA’s  tournament 
headquarters  will  be  located. 
The  switch  will  transfer  calls 
from  both  IP  and  digital 
phones,  Sutton  said.  The  cre¬ 
dentials  of  players,  team  offi¬ 
cials  and  other  participants 
will  be  authenticated  through 
network  connections  to  FIFA’s 
home  office  in  St.  Gallen, 
Switzerland,  and  links  will  also 
be  set  up  to  U.S.  government 
security  and  immigration  sys¬ 
tems.  In  addition, 
real-time  data  will 
be  transmitted  to  a 
broadcast  center  in 
New  York. 

At  each  of  the 
stadiums,  Avaya  is 
installing  wireless 
and  wired  LANs 
to  support  the  ac¬ 
creditation  of 
players  and  jour¬ 
nalists,  and  to  give 
reporters  pass¬ 


word-based  access  to  a  Yahoo 
Inc.  Web  portal  that  will  pro¬ 
vide  information  about  the 
games.  Some  of  the  installa¬ 
tions  could  take  place  just 
days  before  the  start  of  the 
tournament,  Sutton  said. 

Gardner  said  that  wherever 
possible,  Avaya  will  take  ad¬ 
vantage  of  existing  IT  infra¬ 
structures  at  the  stadiums, 
such  as  802.11b  Wi-Fi  net¬ 
works  that  have  been  set  up  at 
Gillette  Stadium  in  Foxboro, 
Mass.,  and  Lincoln  Financial 
Field  in  Philadelphia. 

Avaya  paid  more  than  $100 
million  for  the  right  to  build 
the  networks  for  last  year’s 
men’s  final,  the  women’s  event 
and  the  next  men’s  tourna¬ 
ment  in  2006.  Gardner  said 
the  company  hasn’t  yet  tabu¬ 
lated  what  it  expects  to  spend 
as  part  of  this  year’s  project. 
But  he  noted  that  with  the  lo¬ 
cation  change  and  the  result¬ 
ing  time  constraints,  the  diffi¬ 
culty  of  the  task  rates  about  an 
8  on  a  scale  of  1  to  10. 1 


Judge  Approves  MCI  Deal;  Sprint  Faces  Possible  Ban 

MCI  gets  OK  for 
fraud  settlement 
with  SEC,  denies 
call-routing  claims 


BY  MATT  HAMBLEN 

WorldCom  Inc.  last  week  re¬ 
ceived  approval  from  a  U.S. 
bankruptcy  court  judge  for  a 
financial  fraud  settlement  deal 
with  the  Securities  and  Ex¬ 
change  Commission  and  de¬ 
nied  in  a  court  filing  that  it  has 
engaged  in  illegal  call-routing, 
as  some  of  its  rivals  claim. 

Meanwhile,  Sprint  Corp. 
said  the  inspector  general  of 
the  U.S.  General  Services  Ad¬ 
ministration  (GSA)  has  recom¬ 
mended  that  the  agency  con¬ 
sider  barring  Sprint  from  com¬ 
peting  for  new  federal  govern¬ 
ment  contracts,  a  disclosure 
that  came  just  days  after  the 
GSA  suspended  WorldCom’s 
eligibility  for  additional  con¬ 
tracts  [QuickLink  40319]. 

The  Sprint  case  stems  from 
a  $2.6  million  overcharge  that 
the  company  made  on  a  tele¬ 


communications  services  con¬ 
tract  with  the  Department  of 
Justice.  A  Sprint  spokesman 
called  the  GSA  inspector  gen¬ 
eral’s  recommendation  “un¬ 
precedented  and  totally  with¬ 
out  merit”  and  said  the  over¬ 
charge  was  the  result  of  an  in¬ 
advertent  billing  error. 

Equating  Sprint’s  error  to 
the  accounting  scandal  at 
WorldCom  is  “outrageous,” 
the  spokesman  said.  He  added 
that  Sprint  had  agreed  to  pay 
the  DOJ  $5.2  million,  twice  the 
amount  of  the  overcharge. 

Jeff  Kagan,  an  independent 
analyst  in  Atlanta,  said  the  lat¬ 
est  developments  add  to  the 
confusion  for  IT  managers 
who  are  weighing  network 
services  deals  with  the  major 
telecommunications  carriers. 
“With  so  many  charges  and 
countercharges,  customers 
don’t  know  the  truth  now,”  Ka¬ 
gan  said.  He  advised  corporate 
users  to  “sit  back  and  wait  for 
the  situation  to  sort  itself  out,” 
if  they  can  hold  off  on  signing 
new  contracts. 

The  judge’s  ruling  on  the 


settlement  deal  with  the  SEC 
was  a  step  forward  for  World¬ 
Com,  which  is  now  operating 
under  its  MCI  brand  name. 
The  settlement  allows  a  civil 
penalty  of  $2.25  billion  that 
was  levied  against  MCI  to  be 
satisfied  by  a  $500  million 
cash  payment  and  the  issuance 
of  $250  million  worth  of  stock 
to  the  company’s  shareholders 
and  bondholders  when  it 


KEY  DEVELOPMENTS 


MCI 


A  bankruptcy  court  judge 
approved  the  proposed  settle¬ 
ment  of  fraud  charges  between 
MCI  and  the  SEC. 

i-  MCI  said  claims  by  rivals 
that  it  had  engaged  in  an  illegal 
call-routing  scheme  are 
“demonstrably  false." 


Sprint 


Sprint  disclosed  that  GSA 
officials  are  weighing  a  possi¬ 
ble  move  to  bar  it  from  new 
government  contracts. 


emerges  from  Chapter  11  bank¬ 
ruptcy  protection. 

But  MCI  still  has  the  GSA’s 
new  contract-suspension  and 
a  federal  investigation  of  its 
call-routing  practices  hanging 
over  it.  The  investigation  was 
spurred  by  complaints  from 
competitors  that  MCI  has 
avoided  paying  them  millions 
of  dollars  in  network  access 
fees  by  illegally  routing  calls. 

MCI  said  an  analysis  done 
by  an  outside  law  firm  showed 
that  it  has  met  all  legal  and 
regulatory  call-routing  re¬ 
quirements.  The  claims  to  the 
contrary  by  AT&T  Corp.  and 
other  rivals  are  “a  misuse  of 
the  bankruptcy  process,”  MCI 
added. 

AT&T  shot  back  in  a  new 
legal  filing  of  its  own,  charac¬ 
terizing  MCI’s  contention  that 
it  was  simply  looking  for  the 
lowest-cost  routing  options  as 
deceptive.  “We’re  talking  about 
the  difference  between  shop¬ 
ping  for  bargains  and  shopping 
with  somebody  else’s  credit 
card,"  said  James  Cicconi, 
AT&T’s  chief  counsel.  I 
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Cisco’s  4Q  Profit 
Up,  Sales  Down 


Cisco  Systems  Inc.  reported  a 
fourth-quarter  profit  of  $982 
million,  up  27%  from  $772  mil¬ 
lion  a  year  ago.  But  revenue  in 
the  fourth  quarter,  which  ended 
July  26,  fell  2%  year-over-year, 
dropping  from  $4.8  billion  to 
$4.7  billion.  Nevertheless,  Cisco 
CEO  John  Chambers  said  that  he 
is  “seeing  some  very  early  signs 
that . . .  could  be  interpreted  as 
cautiously  optimistic.” 


Novell  Acquires 
Linux  Developer 

Novell  Inc.  said  it  has  acquired 
Ximian  Inc.,  a  Boston-based  de¬ 
veloper  of  Linux  desktop  applica¬ 
tions  and  systems  management 
software.  The  cost  of  the  deal, 
which  is  part  of  a  plan  by  Novell 
to  increase  its  focus  on  Linux, 
wasn’t  disclosed.  Novell  also  said 
it  will  ship  a  full  Linux-based  ver¬ 
sion  of  its  GroupWise  messaging 
software  by  mid-2004. 


Judge  Stays  Ban  on 
BlackBerry  Sales 

A  U.S.  District  Court  judge  in  Vir¬ 
ginia  issued  an  injunction  barring 
Research  In  Motion  Ltd.  (RIM) 
from  selling  its  BlackBerry  hand¬ 
held  devices  in  the  U.S.  but  then 
stayed  the  ban  pending  an  ap¬ 
peal.  The  injunction  was  sought 
by  Arlington,  Va.-based  NTP 
Inc.,  which  last  November  won 
a  jury  decision  that  Waterloo, 
Ontario-based  RIM  had  infringed 
on  U.S.  patents  held  by  NTP. 


Short  Takes 

At  a  meeting  with  financial 
analysts  in  New  York,  EMC  CORP. 
said  it's  on  track  to  be  profitable 
in  both  the  third  and  fourth  quar¬ 
ters.  The  storage  vendor  also 
forecast  year-over-year  revenue 
growth  in  the  midteens  for  those 
two  quarters. . . .  STORAGE 
TECHNOLOGY  CORP.  in  Louisville, 
Colo.,  cut  the  price  of  its  D-Se- 
ries  disk  storage  subsystems  by 
up  to  30%. 


Linux  Proponents 
Strike  Back  at  SCO 


IBM,  Red  Hat  file 
separate  lawsuits 

BY  TODD  R.  WEISS 

SAN  FRANCISCO 

IBM  AND  RED  HAT  INC.  last 
week  fired  back  at  The 
SCO  Group  Inc.  over  its 
campaign  against  Linux 
vendors  and  users,  filing  sep¬ 
arate  lawsuits  aimed  at 
thwarting  SCO’s  efforts  to 
force  companies  to 
license  its  Unix- 
ware  technology. 

In  response,  SCO  reiterated 
its  claim  that  Linux  is  an  unau¬ 
thorized  derivative  of  Unix 
and  said  it  will  continue  with 
its  bid  to  require  corporate 
users  of  the  open-source  oper¬ 
ating  system  to  pay  licensing 
fees.  Doing  so  “is  the  best  and 


clearest  course  for  customers 
to  minimize  Linux  problems,” 
Lindon,  Utah-based  SCO  said. 

But  some  users  at  the  Linux- 
World  Conference  &  Expo 
here  applauded  the  legal  ma¬ 
neuver  by  Raleigh,  N.C.-based 
Red  Hat,  which  was  followed 
later  in  the  week  by  IBM’s  fil¬ 
ing  of  a  patent-infringement 
countersuit  against  SCO. 

“It’s  good  what  Red  Hat  is 
doing,”  said  Jeffrey  Baum,  a 

systems  administra¬ 
tor  at  San  Francis¬ 
co-based  Banc  of 
America  Securities  LLC.  “IBM 
and  everyone  else  should  join 
forces.  They  need  to  fight 
these  guys  tooth  and  nail  [to 
stop]  SCO’s  illegitimate  at¬ 
tempt  to  hold  people  hostage.” 
Banc  of  America  Securities 
uses  Linux  on  firewalls,  e-mail 


and  file  transfer  protocol 
servers,  as  well  as  systems 
running  the  open-source 
MySQL  database. 

George  Weiss,  an  analyst  at 
Gartner  Inc.,  said  Linux  back¬ 
ers  need  to  come  forward  more 
forcefully  to  counter  the  blows 
SCO  has  been  dishing  out. 

The  actions  taken  by  Red 
Hat  and  IBM  may  help  make 
IT  managers  more  confident 
about  the  future  prospects  of 
Linux,  said  Bill  Claybrook,  an 
analyst  at  Aberdeen  Group  Inc. 
in  Boston.  “It  gives  users  the 
impression  that  companies  are 
going  to  fight  back,”  he  added. 

IBM,  which  was  sued  by 
SCO  in  March  for  allegedly 
breaching  its  Unix  licensing 
contract,  claimed  in  its  coun¬ 
tersuit  that  SCO  has  infringed 
on  four  patents  held  by  IBM 


and  doesn’t  have  grounds  to 
sue  companies  over  their  use 
of  Linux.  Red  Hat  filed  a  series 
of  complaints  charging  SCO 
with  unfair  competition,  trade 
libel  and  other  offenses. 

An  IT  architect  at  a  U.S.- 
based  manufacturing  company, 
who  asked  that  he  not  be  iden¬ 
tified,  said  that  Red  Hat’s  effort 
to  stop  SCO’s  public  attacks  on 
Linux  is  “not  going  to  add  any 
comfort”  for  users  like  him. 
However,  his  company  doesn’t 
plan  to  put  its  use  of  Linux  on 
hold,  he  said. 

Even  if  SCO  prevails  in  its 
effort  to  extract  license  fees 
from  corporate  users,  Linux 
will  still  be  the  right  choice 
compared  with  using  more  ex¬ 
pensive  operating  systems,  the 
architect  added.  “If  we  end  up 
having  to  pay  [a  fee],  depend¬ 
ing  on  what  it  is,  we’re  still 
saving  money,”  he  said.  I 


READ  MORE  ONLINE 

For  full  coverage  of  the  SCO/Linux 
controversy,  go  to  our  Web  site: 

QuickLink  a3260 
www.computerworld.com 
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OS/2  Migration 

enable  customers  to  perform 
online  transactions  such  as 
purchasing  sports  and  concert 
tickets,  experts  said. 

David  Kerr,  director  of  in¬ 
dustry  solutions  development 
in  IBM’s  WebSphere  division, 
argued  against  installing  Win¬ 
dows  on  bank  teller  worksta¬ 
tions,  electronic  bank  kiosks 
and  ATMs,  claiming  that  it’s  a 
proprietary  approach  that  sti¬ 
fles  competition. 

“Banks,  being  frugal  with 
cash,  would  prefer  to  purchase 
from  a  competitive  market¬ 
place  so  they  don’t  get  tied  to  a 
certain  vendor.  That  certain 
company  has  demonstrated  the 
pricing  power  it  has  by  [sud¬ 
denly]  changing  it’s  licensing 
model  before,”  Kerr  said,  refer¬ 
ring  to  Microsoft  Corp. 

“I’m  not  saying  this  because 
I  don’t  want  Microsoft  to  be 
successful,”  he  said.  “We  don’t 
believe  a  proprietary  product 
is  in  the  best  long-term  interest 
of  our  customers.” 


Kerr  said  IBM  customers 
who  choose  Linux  over  Win¬ 
dows  as  a  replacement  for 
OS/2  will  have  functionality 
that’s  comparable  to  that  of 
Windows-based  systems.  He 
noted  that  Sun  Microsystems 
Inc.’s  Java  2  Enterprise  Edition 
can  be  used  to  integrate  Linux 
systems  with  existing  back¬ 
end  systems. 

Dan  Vermeire,  chief  tech¬ 
nology  officer  at  Huntington 
Bancshares  Inc.  in  Columbus, 


Farewell,  OS/2 

Retirement  of  0S/2-based 
ATMs  is  being  spurred  by: 

■  IBM’s  decision  to  drop 
support  of  OS/2  in  2006. 

■  Requirements  for  machine 
upgrades  from  single  Data 
Encryption  Standard  (DES) 
to  triple  DES. 

■  The  Americans  with  Disabilities 
Act,  which  requires  audio  assis¬ 
tance  on  machines. 

■  The  Check  Clearing  for  the  21st 
Century  Act,  also  known  as 
Check  21,  which  allows  checks 
to  be  imaged  upon  deposit. 


Ohio,  said  he’s  keeping  an 
open  mind  while  seeking  re¬ 
quests  for  proposals  to  replace 
or  upgrade  approximately  900 
ATMs.  But  he  expects  to  de¬ 
ploy  Windows.  “Linux  does 
have  a  lot  of  attractions.  Price, 
flexibility,  the  support  IBM 
and  other  Tier  1  providers  are 
giving  to  it  make  it  a  serious 
contender,”  Vermeire  said.  But 
in  branch  banking,  what  mat¬ 
ters  is  the  operating  system 
ATMs  run  on,  he  noted. 

The  two  largest  ATM  ven¬ 
dors  —  Dayton,  Ohio-based 
NCR  Corp.  and  North  Canton, 
Ohio-based  Diebold  Inc.  — 
have  both  adopted  Windows 
as  their  OS/2  migration  paths. 

“Financial  institutions  that 
buy  ATMs  have  indicated 
Windows  is  the  direction 
they’d  like  us  to  go,  and  in  fact 
our  competitors  are  all  on 
Windows,”  said  Phil  Kasper, 
assistant  vice  president  for 
marketing  at  NCR. 

Kasper  said  NCR  is  making  a 
“drastic”  changeover  to  Win¬ 
dows  this  year  and  will  com¬ 
pletely  phase  out  OS/2  by  2005. 
Keith  Lewis,  senior  marketing 


manager  at  Diebold,  said  his 
company  still  installs  OS/2.  He 
couldn’t  say  when  Diebold 
would  be  able  to  completely 
move  off  the  operating  system. 

OS/2  was  adopted  widely  in 
the  financial  services  sector 
early  on  because  of  its  reputa¬ 
tion  for  dependability.  And 
banks  are  traditionally  squea¬ 
mish  about  moving  off  of  any 
system  because  of  concerns 
about  losing  customer  data. 

“It’s  very  reliable,  and  you 
want  it  to  be  reliable  and  sta¬ 
ble.  OS/2  is  doing  what  we 
want,”  said  Ron  Ferri,  a  tech¬ 
nology  relationship  consul¬ 
tant  at  FleetBoston  Financial 
Corp.  “You  could  run  with  that 
for  a  while,  until  vendors 
moved  off  it.” 

Ferri  said  that  as  part  of  a  pi¬ 
lot  program,  Fleet  has  replaced 
about  100  out  of  3,400  ATMs 
that  have  been  running  OS/2. 
The  Windows-enabled  ATMs 
have  high-bandwidth  links  to 
back-end  servers  to  provide 
customers  who  use  Fleet’s  on¬ 
line  banking  service  with  the 
ability  to  pay  bills  using  Web- 
enabled  ATMs,  he  said.  I 
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Straight-Through  Processing 
Needs  Jump-start,  Panel  Says 


Lack  of  deadline  and  clear  ROI  stalls  efforts 
to  fully  automate  stock  trade  processing 


v  -  ....  y»  gyp.  v... 

Straight-Through  Views 


Findings  from  a  survey  of  financial  services  firms 
about  STP  include  the  following: 

■  Two-thirds  said  they  have  launched  at  least  one  STP  initiative 
or  plan  to  do  so  by  year's  end. 

■  49%  use  direct  electronic  links  to  communicate  stock  trade 
orders  to  other  companies. 

■  Nearly  40%  have  to  manually  enter  data  into  their  systems 
at  least  twice  for  the  same  transaction. 

■  42%  of  the  Buy  and  Sell  transactions  processed  by  the 
respondents  are  still  paper-based. 

Base:  Executives  at  184  financial  services  firms  worldwide  who  were  surveyed  in  April  and  May. 

SOURCE.  GARTNER  INC  .  STAMFORD.  CONN.. 

AND  THE  SECURITIES  INDUSTRY  ASSOCIATION.  NEW  YORK 


BY  LUCAS  MEARIAN 

A  panel  of  brokerage  officials 
last  week  said  that  straight- 
through  processing  (STP)  ini¬ 
tiatives  have  lost  a  sense  of  ur¬ 
gency  at  many  fi¬ 
nancial  services 
firms  because  of  the 
lack  of  a  compli¬ 
ance  deadline  and 
the  difficulty  of  convincing 
corporate  executives  that  the 
systems  will  yield  a  return  on 
investment. 

The  panelists  who  took  part 
in  the  discussion,  which  was 
hosted  by  the  Securities  Indus¬ 
try  Association  (SIA)  in  New 
York,  added  that  efforts  need 
to  be  made  to  rejuvenate  en¬ 
thusiasm  for  automating  the 
end-to-end  processing  of  stock 
trades  via  direct  connections 
between  the  back-end  systems 
at  different  brokerages. 

Some  of  the  front-end  trad¬ 
ing  process  is  still  handled  via 
phone  and  fax,  and  trade 
settlement  systems  still  rely 
on  batch  processing.  Until  July 
2002,  the  SIA  was  pushing  for  a 
mid-2005  deadline  for  switch¬ 
ing  to  next-day  settlement  of 
all  trades,  a  mandate  that 
helped  spur  the  adoption  of 
STP  technology.  But  the  trade 
group  then  dropped  the  dead¬ 
line  [QuickLink  31538]  and  de¬ 
cided  to  focus  solely  on  STP. 

Without  the  push  toward  so- 
called  T+l  settlements,  though, 
the  SIA  is  in  the  position  of 
having  to  sell  STP  on  the  basis 
of  its  potential  efficiencies  and 
cost  savings,  said  John  Panch- 
ery,  an  SIA  vice  president. 

Some  financial  services 
firms  are  skeptical  that  central 
trade  matching,  a  key  compo¬ 
nent  of  STP,  will  ever  become  a 
reality,  he  said.  The  Global 
Straight  Through  Processing 
Association  in  Zurich,  one  of 
two  organizations  that  were 
developing  central  trade¬ 
matching  engines,  folded  late 
last  year.  Only  Boston-based 


Omgeo  LLC  remains  as  a  ven¬ 
dor  of  matching  technology. 

David  Furlonger,  an  analyst 
at  Gartner  Inc.,  agreed  that 
there’s  a  “degree  of  cynicism” 
about  STP  among 
brokerage  execu¬ 
tives.  The  lack  of  a 
T+l  deadline  has 
caused  some  com¬ 
panies  to  pause  STP  projects, 
Furlonger  said,  adding  that  the 
best  way  to  jump-start  such 
efforts  is  to  show  how  they 
can  produce  a  solid  ROI. 

But  the  middleware  needed 
to  support  STP  isn’t  cheap, 


BY  LUCAS  MEARIAN 

Keynote  Systems  Inc.  last 
week  said  that  an  online  per¬ 
formance  showdown  it  con¬ 
ducted  among  eight  top  U.S. 
banks  over  a  two-week  period 
revealed  a  wide  disparity  in 
the  speed  and  reliability  of  the 
monitored  Web  sites. 

The  average  time  it  took  to 
complete  an  account-balance- 
check  transaction  on  the  eight 
sites  varied  on  a  weekly  basis 
from  8.16  seconds  to  more 
than  23  seconds,  said  San  Ma¬ 
teo,  Calif.-based  Keynote  (see 


noted  Tim  Lind,  an  analyst  at 
TowerGroup  in  Needham, 
Mass.  “If  we  wait  to  base  all 
these  decisions  on  cold,  hard 
numbers,  we’re  going  to  be 
waiting  a  long  time,”  he  said. 

The  number  of  investment 
management  firms  using  Om- 
geo’s  trade-matching  engine 
has  grown  from  19  a  year  ago  to 
63  now,  said  Lee  Cutone,  the 
company’s  managing  director 
of  industry  relations.  That  has 
resulted  in  more  same-day 
trade  settlements  between 
firms  and  indicates  a  contin¬ 
ued  interest  in  STP,  he  said. 

But  Sanjay  Vatsa,  first  vice 
president  of  operations  for 
global  business  strategies  and 
solutions  at  Merrill  Lynch  & 


chart).  The  company  added 
that  the  success  rate  for  com¬ 
pleting  the  transaction  ranged 
from  a  high  of  99.91%  to  a  low 
of  just  89.07%. 

The  performance  data  rep¬ 
resents  the  first  two  weeks’ 
worth  of  results  from  an  on¬ 
line  banking  transaction-mon¬ 
itoring  service  that  Keynote 
announced  in  May.  Chase 
Manhattan  Bank  USA  and 
Wells  Fargo  &  Co.  had  the  top 
two  response  times  each 
week,  while  Washington  Mu¬ 
tual  Inc.  and  Bank  of  America 


Co.’s  investment  division,  said 
banks  that  act  as  custodians  by 
holding  stock  and  bond  certifi¬ 
cates  need  to  be  convinced  to 
set  up  the  same  kind  of  STP- 
capable  systems  that  broker¬ 
ages  are  being  asked  to  install. 

Tom  Quinn,  chairman  of  the 
SIA’s  business  practices  and 
matching-implementation  sub- 


Corp.  brought  up  the  rear,  ac¬ 
cording  to  Keynote’s  automat¬ 
ed  measurements  from  10 
cities.  Washington  Mutual  and 
Bank  of  America  also  occu¬ 
pied  the  last  spots  in  terms  of 
availability,  Keynote  said. 

“We  subscribe  to  a  variety 
of  monitoring  services,  and 
our  ranking  varies  on  each  re¬ 
port,”  said  Angela  Clegg,  vice 
president  of  the  Technology 
Solutions  group  at  Seattle- 
based  Washington  Mutual. 
“We’re  working  diligently  to 
optimize  the  performance  of 
our  Web  site.” 

Questions  Ratings 

A  spokeswoman  for  Charlotte, 
N.C.-based  Bank  of  America 
said  Keystone’s  ratings  are 
“not  consistent  with  our  inter¬ 
nal  data  or  what  we’ve  seen  in 
[other]  external  reports.”  She 
cited  a  performance-tracking 
study  done  by  Waltham, 
Mass.-based  Gomez  Inc.  that 
gave  Bank  of  America  the  top 
response-time  rating  among 
banks  for  the  period  from  July 
19  to  Aug.  1. 

Keynote  measured  Web  site 
response  times  and  transac¬ 
tion  completion  rates  during 
the  weeks  of  July  21  and  July 
28,  after  opening  an  online 
banking  account  at  each  insti- 


committee,  said  that  no  matter 
where  a  company  is  on  the 
technology  curve,  “there’s 
only  certain  things  you’re  able 
to  do  unilaterally.”  Automated 
processes  for  order  entry, 
stock-price  comparison,  and 
trade  affirmation  and  confir¬ 
mation  need  to  be  Tolled  out 
industrywide,  he  said.  I 


tution.  The  company  said  it 
monitored  how  long  it  took  to 
access  the  banks’  home  pages, 
log  into  the  accounts,  check 
their  balances  and  log  out. 

Brad  Adrian,  an  analyst  at 
Gartner  Inc.  in  Stamford, 
Conn.,  said  Keynote  appears  to 
have  done  a  good  job  of  factor¬ 
ing  out  exterior  telecommuni¬ 
cations  network  issues  and  fo¬ 
cusing  on  internal  Web  site 
performance.  He  noted  that 
online  transaction  speeds  can 
be  greatly  affected  by  how  well 
systems  and  databases  are  in¬ 
tegrated.  “The  bigger  the  bank 
is,  the  more  difficult  it  can  be 
to  tie  these  systems  together  in 
a  good  way,”  Adrian  said. 

Poor  online  performance 
can  hamper  customer  reten¬ 
tion  efforts  as  well  as  attempts 
by  banks  to  reduce  costs, 
Adrian  said.  “The  worst  thing 
is  for  a  customer  to  pick  up  a 
phone  and  ask  if  a  transaction 
went  through,”  he  said. 

Keynote  analyst  Roopak  Pa¬ 
tel  said  end-user  authorization 
and  data-encryption  methods 
can  also  cause  slowdowns  in 
response  times  on  Web  sites. 
Heavy-duty  approaches  to  au¬ 
thorization  and  encryption  are 
“a  benefit  in  terms  of  security, 
but  not  in  terms  of  perfor¬ 
mance,”  Patel  said.  I 
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RANK 

1  SITE 

PERFORMANCE* 

1 

Chase 

8.16 

8.29 

2 

Wells  Fargo 

8.58 

9.48 

3 

SunTrust 

11.85 

11.64 

4 

Wachovia 

12.11 

12.38 

5 

iHost  Bank 

13.16 

13.33 

6 

US  Bank 

14.04 

14.07 

7 

Bank  of  America 

17.49 

17.59 

8 

Washington  Mutual 

23.09 

23.44 

•Performance  times  are  in  seconds 

Base:  Average  response  times  measured  hourly,  Monday  through  Sunday,  8  am  to  midnight  EDT. 
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On  Your 
Mark... 

Are  you  ready  to 
reduce  power 
densities  in  your 
rack  with  an 
efficient,  cost-saving 
power  and  cooling 


"Our  Video  on  Demand  (VOD) 
servers  are  air  cooled  from  front  to 
back.  The  APC  racks  that  house  the 
InfraStruXure" are  also  designed  to  cool 
from  front  to  back.  So  the  same  racks 
can  effectively  house  our  power  system 
and  our  servers. " 

Vince  Pombo,  Vice  President  of  Engineering 
Rich  Flanders,  Director  of  Engineering 
Time  Warner  Cable. 


More  and  more  IT 
professionals  are  changing 
from  legacy  systems  to  a 
new  integrated  power  and 
cooling  solution. 
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Kingston.  Rl  02832  USA  ©2003  American  Power  Conversion 
Corporation.  All  Trademarks  are  the  property  of  their  respective 
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Vendors  Push  File  Validation 
Plan  as  IT  Security  Measure 


Database  will  let  users 
check  integrity  of  flies 
in  commercial  software 


BY  JAIKUMAR  VIJAYAN 

A  group  of  vendors  led  by  Tripwire 
Inc.  last  week  announced  plans  to  de¬ 
velop  a  database  that  IT  managers 
could  use  to  verify  the  authenticity  and 
integrity  of  the  files  built  into  pack¬ 
aged  software. 

Hewlett-Packard  Co.,  IBM,  RSA 
Security  Inc.,  InstallShield  Software 
Corp.  and  Sun  Microsystems  Inc.  are 
also  involved  in  the  File  Signature 
Database  (FSDB)  effort.  The  reposi¬ 
tory  will  store  metadata  about  individ¬ 
ual  files  created  by  each  of  the  ven¬ 
dors,  such  as  the  file’s  name,  a  “born- 
on”  date  and  its  digital  hash  values. 

Corporate  users  then  can  check  the 
software  running  on  their  systems 
against  the  “good  file”  information 
contained  in  the  FSDB  to  make  sure 
that  files  haven’t  been  improperly 
modified  or  corrupted  by  viruses,  said 
Wyatt  Starnes,  president  and  CEO  of 


FSDB  Access  Options 

I  A  Web  service  supporting  the  database 
will  be  made  available  via  the  Internet  in 
the  first  half  of  next  year. 

Hardware  appliances  that  will  let  users 
self-populate  and  host  relevant  file  meta¬ 
data  internally  are  also  due  in  2004. 

Portland,  Ore.-based  Tripwire. 

Although  some  software  from  ven¬ 
dors  like  Sun,  IBM  and  Microsoft  Corp. 
lets  users  verify  the  integrity  of  files, 
there  currently  is  no  common  way  for 
users  to  do  so  across  multivendor  ap¬ 
plications,  Starnes  said. 

The  FSDB  plan  sounds  like  “a  great 
initiative,”  said  Ken  Tyminski,  chief  in¬ 
formation  security  officer  at  Pruden¬ 
tial  Financial  in  Newark,  N.J.  “It  will 
give  people  the  ability  to  ensure  the 
code  they  have  is  really  the  right  code,” 
he  noted.  “If  you  think  something  is 
not  at  the  right  level  or  has  been  al¬ 
tered,  you  can  look  it  up.” 

Doing  that  now  involves  going  to 
multiple  sources  to  get  the  correct  file 


information,  Tyminski  said.  He  added 
that  he  hopes  more  vendors  join  the 
FSDB  initiative  to  further  simplify  the 
verification  process  for  users. 

Validating  the  authenticity  of  files 
could  also  be  helpful  from  a  regulatory 
compliance  standpoint,  said  John  Free¬ 
man,  a  senior  process  control  systems 
engineer  at  Pittsburgh-based  Bayer 
Corp.,  the  U.S.  subsidiary  of  chemicals 
and  pharmaceuticals  maker  Bayer  AG. 

“I’m  working  in  an  FDA-regulated 
environment  where  we’re  required  to 
maintain  change  control  on  all  our 
software  systems  that  are  used  in  the 
production  of  [drugs],”  Freeman  said. 
“It  can  be  a  pretty  large  job  doing  that. 
This  tool  will  help  simplify  and 
streamline  that  process.” 

The  FSDB  currently  is  populated 
with  more  than  11  million  file  signa¬ 
tures  from  the  participating  vendors. 
Each  charter  member  will  add  new  file 
information  to  the  database  when  soft¬ 
ware  products  are  released  or  updated, 
according  to  Tripwire. 

The  initiative  is  open  to  all  software 
vendors,  and  Tripwire  said  the  data¬ 
base  will  be  accessible  to  any  users 
with  legitimately  licensed  applications. 
In  addition,  the  FSDB  will  be  made 
available  to  government  and  law  en¬ 
forcement  agencies  for  potential  use  in 
cybercrime  investigations.  I 


IT  Departments  Face  a  Lack  of 
Project  Management  Know-how 


BY  THOMAS  HOFFMAN 


IT  SKILLS 


More  than  75%  of  219 
IT  executives  inter¬ 
viewed  earlier  this 
year  by  Meta  Group  Inc.  indicated  that 
a  lack  of  in-house  project  management 
skills  is  a  major  workforce  issue  for 
them.  But  relatively  few  companies  of¬ 
fer  formal  IT  project  management 
training,  according  to  a  Meta  report. 

The  lack  of  experienced  project 
managers  is  so  acute,  said  analysts 
from  Stamford,  Conn.-based  Meta  and 
other  consulting  firms,  that  they’re 
waiting  to  see  whether  IT-intensive 
regulatory  compliance  efforts,  such  as 
meeting  the  mandates  of  the  Sarbanes- 
Oxley  and  USA  Patriot  acts,  will  lead 
to  a  resurgence  of  training  efforts. 

Margo  Visitacion,  an  analyst  at  For¬ 
rester  Research  Inc.  in  Cambridge, 
Mass.,  said  Meta’s  findings  mesh  with 
her  own  research.  “A  lot  of  unofficial 
training  is  going  on  where  people  take 
on  the  role  of  project  manager,”  Visita¬ 
cion  said.  But,  she  added,  “the  only 


time  there’s  been  a  dedicated  effort  for 
project  management  training  was  Y2k, 
and  once  that  was  completed,  the  mon¬ 
ey  went  somewhere  else.” 

Providing  consistent  project  man¬ 
agement  training  to  a  technically  ori¬ 
ented  staff  can  be  “a  challenge,”  said 
Mark  Reilley,  an  IT  project 
manager  at  the  Corpora¬ 
tion  for  Public  Broadcast¬ 
ing  (CPB)  in  Washington. 

He  is  one  of  six  IT  staffers 
who  support  125  users  at 
the  nonprofit  company. 

That  setup  “works  well 
on  a  day-to-day  opera¬ 
tional  basis,”  Reilley  said. 

But  when  the  CPB  needs 
to  install  a  new  system  or 
make  major  technology 
enhancements,  “we  tend  to  struggle,” 
he  added.  The  CPB  can’t  afford  to  as¬ 
sign  a  dedicated  project  manager  to 
each  IT  initiative  and  instead  relies  on 
a  system  “owner,”  meaning  an  IT 
staffer,  to  oversee  the  work. 


DATA  POINT 

of  IT  manager  ;ited  a 
lack  of  internal  project 
management  skills  as 
an  important  work- 
forci  issue  this  year. 


Reilley  said  some  IT  technicians 
don’t  have  all  the  basic  skills  needed  to 
coordinate  projects,  but  the  CPB  offers 
them  training  when  possible.  In  addi¬ 
tion,  Reilley  mentors  staffers  during 
the  analysis  phase  of  projects  and 
helps  them  outline  an  overall  plan. 

One  of  the  reasons  why  many  com¬ 
panies  lack  project  management  capa¬ 
bilities  is  that  they  tend  to  hire  IT 
professionals  with  similar  skills,  said 
Martin  Colburn,  chief  technology  offi- 
______  cer  at  the  National  Asso¬ 
ciation  of  Securities  Deal¬ 
ers  Inc.  in  Rockville,  Md. 
To  combat  that,  he  said, 

IT  managers  should  de¬ 
velop  a  matrix  of  the  pri¬ 
mary  and  backup  skills 
they  need  and  then  assess 
their  strengths  and  weak¬ 
nesses  “to  determine 
where  to  adjust.” 

Meta’s  report,  which 
was  issued  last  month, 
said  that  less  than  15%  of  companies 
polled  informally  have  IT  project  man¬ 
agement  training  programs  in  place. 
The  poll  was  done  separately  from  the 
report  that  identified  project  manage¬ 
ment  shortcomings  as  a  key  issue.  I 


FREE  White  Paper! 

"Determining  Total  Cost  of  Ownership 
for  Data  Center  and  Network 
Room  Infrastructure" 

Just  mail  or  fax  this  completed  coupon 
or  contact  APC  for  your  FREE  white 
paper,  "Determining  Total  Cost  of 
Ownership  for  Data  Center  and 
Network  Room  Infrastructure." 

Also  receive  our  FREE  InfraStruXure" 
brochure.  Better  yet,  order  both  today 
at  the  APC  Web  site! 

http://promo.apc.com 
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Legendary  Reliability® 


Are  you  set  to  save  space 
and  minimize  installation 
and  maintenance  costs 
with  a  modular  manageable, 
pre-engineered  architecture? 


They  Are. 


“If  I  had  purchased  the  incumbent 
vendor's  3-phase  upgrade  model, 

I  would  have  paid  75%  more  in  service 
costs  over  the  next  four  years  and 
I  would  have  had  to  utilize  50%  more 
of  my  precious  floor  space. " 

Captain  Timothy  Riley 

Support  Services  Division 

City  of  Newport  Beach  Police  Department 


Many  IT  professionals  have  switched 
from  an  inflexible  proprietary  system  to 
network  critical  physical  infrastructure. 


CAUTION 
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ADVERTISEMENT 

InfraStruXure™ 
is  the  Key  to 
Stronger  NCPI 

by  Russell  Senesac 

InfraStruXure  Product  Manager 

APC  InfraStruXure™  architecture  is  the  industry's 
new  benchmark  for  on-demand  network-critical 
physical  infrastructure  (NCPI).  The  foundation  of  IT 
networks,  NCPI  consists  of  power,  power  distribu¬ 
tion,  racks,  cabling,  cable  distribution,  cooling,  and 
cooling  distribution.  Strong  NCPI  defends  your  IT 
networks  against  security  and  availability  problems. 

Complementing  these  benefits  of  strong  NCPI  is 
InfraStruXure's  open,  adaptable,  integrated  ap¬ 
proach,  which  ensures  optimal  performance  and 
lower  upfront  and  operating  costs.  InfraStruXure 
fully  integrates  power,  cooling,  management  and 
services  within  a  rack-optimized  design. 

Power 

InfraStruXure  architecture  features  rack-optimized, 
intelligent  UPSs  and  power  distribution  units  that 
are  highly  manageable,  modular,  and  pre-engineered 
to  meet  the  demands  of  the  smallest  wiring  closet  to 
the  largest  data  center. 

Cooling 

Cooling  solutions  designed  for  InfraStruXure  are 
extremely  flexible,  fitting  almost  any  data  environment 
as  though  custom-made,  but  without  the  extensive  engi¬ 
neering  that  traditional  cooling  systems  require. 

Management 

InfraStruXure  boasts  the  industry’s  only  fully  integrated 
power  management  solution.  Monitor  the  elements  of 
your  data  center,  understand  how  your  InfraStruXure  is 
performing  and,  when  necessary,  take  action  remotely  to 
ensure  service  levels  are  met — all  from  a  Web  browser  on 
your  desktop  computer.  You’ll  be  able  to  maximize  avail¬ 
ability  through  system-level  proactive  management. 
InfraStruXure  management  soluuons  are  easy  to  use  and 
require  little  to  no  training. 

Services 

A  full  menu  of  professional  services,  performed  by 
APC  Global  Services  experts,  supports  your 
InfraStruXure  architecture.  Whether  building  a  new 
installation  or  retrofitting  InfraStruXure  into  your 
existing  IT  environment,  a  range  of  services  is  able  to 
meet  your  specific  needs.  Factory-trained  professionals 
commission  the  elements  of  your  InfraStruXure, 
understand  how  it  is  performing  and,  when  necessary, 
take  action  to  ensure  optimal  service  levels  are  met. 

The  Result 

With  InfraStruXure,  you  get  the  reliability,  afford¬ 
ability  and  predictability  of  standard  solutions,  yet 
completely  customized  for  your  specific  problems. 
As  your  requirements  change,  InfraStruXure  easily 
adapts,  allowing  you  to  build  out  or  scale  back 
capacity  as  it  is  required.  ■ 

FREE  White  Paper  and  Infrastructure™  Brochure 

Visit  http://promo.apc.com  Key  Code  m905y 
Call  888-289-APCC  X2927  •  Fax  401 -788-2797 
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IBM  recommends  Microsoft®  Windows®  XP  Professional  for  Business. 
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irdBa-ervfiahk  is  i"tra*marit (rt RTndnthw'Jm  mr E/?'  *!nolop'es'  lnJ-  ("VeriTest")  or  Ziff  Davis  Media,  Inc.;  neither  Ziff  Davis  Media,  Inc.,  nor  VeriTest  makes  any  representations  or  warranties  as  to  these  test  results.  Winstone  is  a  registered  trademark 
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,  '  ?»«  ?  ,.',  ?,  ?  !a  A  ,LP  ,  management,  battery  condrtion  ng  and  other  customer  preferences.  Includes  battery  and  optional  travel  bezel  instead  of  standard  optical  drive  in  Ultrabay  bay,  if  applicable;  weight  may  vary  due  to  vendor  components  manufacturing  process  and  options8 
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NEW!  IBM  ThinkPad  T40 

Distinctive  IBM  Innovations: 

•  Access  Connections  -  easiest  wired  and 
wireless  Connectivity 

•  IBM  Embedded  Security  Subsystem  2.0' 

System  Features: 

•  Intel  Centrino™  mobile  technology 

-  Intel'  Pentium  M  processor  1.3GHz  supports 
Enhanced  Intel  SpeedStep  technology’ 

-Intel  PRO/Wireless  Network 
Connection  802.11b 

•  14.1"  XGA  TFT  Display  (1024x768) 

•  256MB  DDR  SDRAM  Std/2GB  max 

•  30GB  hard  drive" 

•  Ultrabay™  Slim  DVD-ROM 

•  6.1-hr  battery  life6  •  5.6-lb  travel  weight 

•  Microsoft  Windows"  XP  Professional8 

•  1-yr  system/battery  limited  warranty8 


*1,599* 


18  NavCode  2378D2U-M529 


Take  off  to  parts  unknown  with  an  IBM  ThinkPad®  wireless  notebook 
The  world’s  easiest  way  to  switch  between  wired  and  wireless. 


ServicePac'  Service  Upgrade:’0 
3-yr  Onsite  Repair/9x5/Next  Business 
Day  Response 
(#30L9195)  *243 


Wherever  you  want  to  work,  the  sky  is  the  limit  when  you  have  IBM  ThinkPad 
notebooks  with  Access  Connections  software  and  wireless  Intel®  Centrino™  mobile 


NEW!  IBM  ThinkPad  R40 

Distinctive  IBM  Innovations: 


y ■■ 
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technology  (on  select  models).  Now  it’s  easier  than  ever  to  switch  between  wired  and 
wireless  networks  —  whether  you’re  at  an  airport,  the  office,  an  Internet  cafe,  even 
your  kitchen.’  So  consider  the  IBM  ThinkPad  wireless  notebook,  and  experience  a 
whole  new  level  of  wireless  possibilities,  think  f  rGGdOITI 


1  866  426-1038  I  ibm.com/shop/m529 

Save  on  shipping.  Order  online!’ 


•  Access  Connections  -  easiest  wired  and 
wireless  connectivity 

•  IBM  Embedded  Security  Subsystem  2.0 

System  Features: 

•  Intel1  Centrino™  mobile  technology 

-Intel  Pentium  M  processor  1.3GHz  supports 
Enhanced  Intel  SpeedStep  technology1" 

-  Intel  PRO/Wireless  Network 
Connection  802.1 1  b 
•14.1"  XGA  TFT  Display  (1024x768) 

•  256MB  DDR  SDRAM  std/IGB  max 

•  20GB  hard  drive 

•  Ultrabay  Plus  CD-RW/DVD-ROM  combo  drive 

•  6.1 -hr  battery  life  •  5.6-lb  travel  weight 

•  Microsoft  Windows  XP  Professional 

•  1-yr  system/battery  limited  warranty’  • 


*1,399* 

P:  NavCode  289723U-M529 

ServicePac  Service  Upgrade: 

2-yr  Onsite  Repair/9x5/Next  Business 
Day  Response 
(#30L91 89)  *197 


varies  by  machine,  but  may  include  the  processor,  power  supply,  heat  sink,  system  board  or  base  cover.  To  determine  the  complete  list  of  parts  for  which  onsite  service  is  available  for  a  particular  machine,  contact  IBM  IBM  will  attempt  to  diagnose  and  resolve  any  problems  remotely  before  sending 
a  replacement  part  or  technician.’These  services  are  available  for  machines  normally  used  for  business,  professional  or  trade  purposes,  rather  than  personal,  family  or  household  purposes.  Not  all  machine  types  and  models  are  covered.  Service  period  begins  with  the  equipment  date  of  purchase 
Service  must  be  purchased  during  the  original  limited  product  warranty  period.  Service  levels  are  response-time  objectives  and  are  not  guarantees.  A  service  technician  is  scheduled  to  arrive  at  your  location  within  two  or  four  business  hours  or  the  next  business  day  (depending  on  service)  after  remote 
problem  determination  is  completed.  For  the  9x5x4-hour  service,  calls  dispatched  after  1 :00  p.m,  local  time,  you  can  expect  the  service  technician  to  arrive  by  the  morning  of  the  next  business  day.  For  noncritical  service  requests,  a  service  technician  will  arrive  by  the  end  of  the  following  business  day. 
If  the  machine  problem  turns  out  to  be  a  Customer  Replaceable  Unit  (CRU),  IBM  will  express  ship  the  part  to  you  for  quick  replacement.  Onsite  24x7x2-hour  service  is  not  available  in  all  locations.  External  peripherals,  such  as  racks,  tape  drives  and  channel  controllers,  require  their  own,  separate  service 
coverage:  they  are  not  covered  under  the  attached  Machine.  Service  activation  is  required  immediately  following  purchase.  For  ThinkPad  notebooks  requiring  LCD  or  other  component  replacement,  IBM  may  choose  to  perform  service  at  the  depot  repair  center.  For  failing  non-IBM  components,  customer 
must  provide  replacement  part  unless  IBM  has  a  Technical  Support  Agreement  with  the  manufacturer.  Service  does  not  cover  accessories,  supply  items  and  certain  parts  such  as  batteries,  frames  and  covers.”Standard  shipping  Included  when  you  order  online  U  S.  only.  With  Intel  SpeedStep,  processor 
speed  may  be  reduced  to  conserve  battery  power.  IBM  reserves  the  right  to  alter  product  offerings  and  specifications  at  any  time,  without  notice.  IBM  is  not  responsible  for  photographic  or  typographic  errors.  All  IBM  product  names  are  registered  trademarks  or  trademarks  ot  International  Business 
Machines  Corporation  in  the  U.S.  and  other  countries.  Lotus  and  SmartSuite  are  registered  trademarks  of  Lotus  Development  Corporation,  an  IBM  Company.  Intel,  Intel  Inside,  the  Intel  Inside  logo,  Celeron,  Intel  Centrino,  the  Intel  Centrino  logo  and  Pentium  are  trademarks  or  registered  trademarks  of 
Intel  Corporation  or  its  subsidiaries  in  the  U.S.  and  other  countries.  Microsoft  and  Windows  are  trademarks  or  registered  trademarks  of  Microsoft  Corporation.  Other  company,  product  and  service  names  may  be  trademarks  or  service  marks  of  others.  ®  2003  IBM  Corp.  All  rights  reserved. 
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MARYFRAN  JOHNSON 


Balancing  the  Buzz 


IF  IT  WERE  INDUSTRY  BUZZ  instead  of 

pride  that  goeth  before  a  fall,  Linux  would  be 
stretched  out  on  the  pavement  right  now  with 
a  bandage  on  its  beak.  That’s  how  deafening 
the  media  noise  was  last  week  out  of  the 
Linux  World  conference  in  San  Francisco. 

Figuring  out  how  much  of  it  matters  to  corporate 
IT  will  take  a  bit  of  sorting  out,  of  course  —  particu¬ 
larly  with  the  legal  cloud  from  SCO’s  intellectual 
property  lawsuit  looming  over  Linux’s  future. 


It  was  welcome  news 
last  week  when  Linux 
vendor  Red  Hat  and  IBM 
each  counterattacked. 
Red  Hat  asked  for  a  rul¬ 
ing  on  SCO’s  copyright 
infringement  claims  (see 
Frank  Hayes’  take  on 
that,  page  50),  while  IBM 
accused  SCO  of  violating 
IBM  patents. 

But  lawyers  and  legal 
land  mines  aside,  the 
momentum  around  the 
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cluster  with  1,450  servers 
that’s  able  to  perform  up 
to  17.7  trillion  calculations 
per  second. 

Impact?  Negligible. 
High  gee-whiz  factor,  but 
no  near-term  benefits. 

■  IBM  and  SuSE  Linux 
cleared  a  security  hurdle 
by  passing  a  certification 
required  by  the  U.S.  De¬ 
partment  of  Defense. 

Impact?  Swell  show-off 
factor  for  Linux,  since 


world’s  fastest-growing  operating 
system  has  become  a  force  of  nature. 
Consider  just  a  few  highlights  from 
LinuxWorld  and  their  potential  im¬ 
pact  on  corporate  IT: 

■  All  of  the  major  vendors,  even 
Linux  foot-dragger  Sun  Microsys¬ 
tems,  lined  up  to  make  speeches 
about  and  roll  out  products  for  the 
penguin’s  followers.  Beyond  the  ma¬ 
jor  server  vendors,  some  heavy  hit¬ 
ters  in  the  systems  management 
market  also  showed  up  bearing  new 
wares  (Veritas,  Computer  Associates 
and  BMC,  to  name  a  few).  With  Lin¬ 
ux  marking  up  26%  of  all  server  oper¬ 
ating  systems  sold  last  year  (says  re¬ 
search  firm  IDC),  the  need  for  better 
management  tools  and  a  wider  appli¬ 
cations  portfolio  is  already  acute. 

Impact  on  corporate  IT?  Lots  of 
choices,  lots  of  support,  lots  of  com¬ 
petitive  pricing  —  exactly  what  cor¬ 
porate  customers  like  to  see. 

E8  Dell  and  the  National  Center  for 
Supercomputing  Applications  an¬ 
nounced  a  project  to  build  a  Linux 


competitors  have  been  sneering  that 
it  would  never  get  to  this  security 
level.  Generally  good  news  for  secu¬ 
rity-conscious  IT  shops  (which 
means  everybody). 

Yet  in  the  slew  of  announcements 
last  week  about  Linux,  there  was  one 


you  didn’t  hear  about  (but  can  read 
about  on  our  front  page  today).  It’s  a 
story  about  how  IBM  has  been  quiet¬ 
ly  informing  its  banking  customers 
about  the  sunset  of  all  OS/2  support 
by  2006  —  and  directing  them  to 
Linux  as  the  favored  migration  path. 

The  vast  numbers  of  automated 
teller  machines  from  coast  to  coast 
mostly  run  OS/2  under  the  covers  to¬ 
day,  and  Big  Blue’s  fondest  hope  is  to 
keep  those  longtime  customers  out 
of  Microsoft’s  grasp.  By  the  mid- 
1990s,  OS/2  users  were  at  least  6  mil¬ 
lion  strong  and  as  fiercely  devoted  to 
IBM’s  alternative  to  Windows  as, 
well,  open-source  users  are  to  Linux 
today.  But  Microsoft  has  leveraged 
its  monopoly  dominance  on  the 
desktop  into  a  significantly  stronger 
position  in  the  enterprise  now,  and 
the  banks  won’t  be  so  willingly  guid¬ 
ed  by  IBM’s  hand  this  time.  Should 
be  quite  the  showdown. 

But  what’s  more  significant  here  is 
the  way  IBM  is  positioning  Linux  as 
a  bridge  from  the  proprietary  past  to 
the  open-source  future.  Novell  has 
already  made  Linux  the  chosen  path 
for  its  migrating  NetWare  customer 
base,  and  Hewlett-Packard  is  march¬ 
ing  in  the  same  direction. 

Now  it’s  up  to  corporate  IT  to 
balance  the  buzz  against  real-world 
results.  I 


f  Prompt? 

WU  LAT&ST 


PIMM  FOX 

Power  in 
The  Field 

WE  THINK  of  sales¬ 
people  as  mobile, 
with  laptops,  cell 
phones  and  PDAs.  But  how 
far  into  the  field  does  your 
CRM  system  reach? 

Your  salespeople  should  be  able  to 
order  up  the  rich  diet  of  data  inside 
your  mainframe  applications  or  taste 
the  pleasure  of  instant  entry  and  ac¬ 
cess  to  information  from  the  field. 

A  sales  call  is  more  powerful  when  a 
well-trained  salesperson  uses  a  hand¬ 
held  device  to  access  pertinent  data 
from  CRM  applications. 

These  devices  can  give  sales  staffers 
access  to  an  IT  feast.  And  the  cost  for 
new  mobile  CRM  technology  (about 
$1,200  to  $1,500  per  seat,  plus  annual 
maintenance  costs 
and  server  licenses) 
is  low  enough  for  a 
company  like  Wil¬ 
mington,  Mass.-based 
UniFirst  Corp.  to  run 
a  substantial  pilot 
program. 

With  400  salespeo¬ 
ple,  90  sales  man¬ 
agers  and  145  loca¬ 
tions  in  the  U.S.  and 
Canada,  UniFirst  is 
the  third-largest  uni¬ 
form  maker  in  the  U.S.  It’s  moving  from 
a  form-based  system  that’s  updated 
once  a  month  to  a  responsive  CRM  sys¬ 
tem  that’s  updated  daily  to  bolster  sales 
calls,  assist  follow-ups  and  get  technol¬ 
ogy  to  people  who  often  shun  the  stuff. 

Now,  instead  of  a  monthly  green-bar 
paper  printout  that  probably  got  left  in 
the  car,  sales  reps  can  see  the  latest  in¬ 
formation  with  the  CRM  tool.  UniFirst 
uses  software  from  SalesLogix,  a  divi¬ 
sion  of  Best  Software  Inc.  in  Scotts¬ 
dale,  Ariz. 

UniFirst  worked  with  Vaultus  Mo¬ 
bile  Technologies  Inc.  in  New  York  to 
get  a  Java-based  client  linked  to  an  ap¬ 
plication  server  that  syncs  with  the 
corporate  sales  database.  As  a  result, 
UniFirst  has  lower  costs.  Gone:  $55,000 
a  year  for  paper,  $40,000  for  planners 
and  calendars,  $100,000  for  FedEx  ser¬ 
vice.  And,  of  course,  the  company  no 
longer  needs  data  entry  people. 

And  this  is  before  the  sales  rep  even 
meets  with  the  client.  At  that  point, 
there  are  more  opportunities  to  save 
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money  —  and  to  make  more  money. 

The  UniFirst  test  has  shown  a  reduc¬ 
tion  in  past-due  invoices.  Moreover, 
managers  get  their  hands  on  data  they 
can  use  to  create  calendars,  prioritize 
accounts  and  help  the  reps  sell. 

The  daily  downloads  take  three  min¬ 
utes  on  a  link  established  via  a  toll-free 
number.  Sales  reps  in  six  locations  are 
testing  the  system  on  Jornada  and  iPaq 
devices.  The  pilot  will  expand  to  all 
400  reps  this  fall. 

You  could  also  opt  to  use  Tablet  PCs. 
They  offer  far  more  screen  space  — 
and  power  —  than  PDAs.  Trexis  Inc. 
in  Valley  Cottage,  N.Y.,  was  able  to  de¬ 
velop  a  CRM  system  for  Tablet  PCs  us¬ 
ing  SalesLogix’s  ActiveX  controls  to 
develop  forms,  bringing  the  CRM  ap¬ 
plication  to  the  Tablet  PC.  Sure,  Tablet 
PCs  cost  more  than  PDAs  ($2,000  vs. 
$1,300),  but  if  you  want  to  use  the  de¬ 
vice  for  more  than  one  application,  the 
power  will  be  handy. 

Like  good  corporate  citizens,  you’ve 
cut  IT  costs.  Now  it’s  time  to  help 
grow  revenue.  That’s  more  difficult, 
but  mobile  CRM  might  help.  I 

DAVID  MOSCHELLA 

Outsourcing 
Is  Good 

IN  THE  1980S,  when  many 
manufacturers  were  clos¬ 
ing  U.S.  plants  and  export¬ 
ing  jobs  overseas,  how  did 
you  feel?  Did  you  ever  think 
that,  as  painful  as  it  all  was, 

the  resulting  economic,  cultural  and 
personal  upheaval  simply  wasn’t  your 
problem,  that  this  was  something  that 
happened  to  other,  older  industries, 
and  that  it  was  really  just  the  normal 
forces  of  capitalism  at  work? 

If  you  did,  you  were  not  alone.  As 
long  as  it  was  automobile,  textile  and 
even  computer  hardware  makers  that 
had  to  change  their  ways,  software  and 
services  professionals  had  the  luxury 
of  focusing  on  the  long-term  benefits 
of  globalization.  Over  the  past  20  years, 
it’s  been  relatively  easy  to  argue  that 
increased  market  competition  and  im¬ 
proved  business  efficiencies  eventually 
result  in  a  net  economic  gain  for  both 
the  U.S.  and  the  world.  Given  time,  this 
is  what  typically  happens. 

But  it  will  be  interesting  to  see  how 
well  these  attitudes  hold  up,  now  that 
globalization  is  challenging  the  U.S. 
software  and  services  industry  itself. 
While  offshore  IT  projects  are  certain¬ 


ly  not  new,  business  interest 
in  overseas  software  devel¬ 
opment,  call  centers  and 
other  IT  services  is  acceler¬ 
ating.  Predictably,  given  to¬ 
day’s  depressed  U.S.  IT  job 
market,  shifting  work 
abroad  has  become  a  con¬ 
troversial  media  issue;  wit¬ 
ness  the  recent  New  York 
Times  front-page  story  fea¬ 
turing  a  leaked  audiotape  of 
an  internal  IBM  discussion 
about  offshore  staffing. 

How  should  the  IT  com¬ 
munity  react  to  this  impor¬ 
tant  trend?  First,  we  shouldn’t  be  out¬ 
raged  or  surprised.  The  conventional 
wisdom  that  our  increasingly  services- 
based  economy  will  be  shielded  from 
globalization  has  always  been  only 
half-true  at  best.  Offshore  workers 
can’t  fix  your  car,  but  many  IT  services 
are  vulnerable  to  competition.  Indeed, 
in  many  ways,  exporting  bit-based  IT 
work  is  actually  much  easier  than  ex¬ 
porting  work  in  industries  that  need  to 


worry  about  physical  sup¬ 
ply  chains,  inventories  and 
related  distribution  costs. 

Aside  from  the  aesthetics 
of  the  name,  software  de¬ 
velopment  could  just  as 
easily  be  relabeled  as  soft¬ 
ware  manufacturing,  and 
increasingly  it  will  be  treat¬ 
ed  as  such.  The  amount  of 
software  that  the  world 
needs  is  virtually  limitless, 
and  the  idea  that  this  pro¬ 
duction  will  remain  the 
special  preserve  of  highly 
paid  U.S.  workers  is  funda¬ 
mentally  silly.  Multinational  compa¬ 
nies  are  supposed  to  adopt  a  country- 
neutral,  global  perspective.  For  these 
firms,  lowering  software  development 
and  customer  support  costs  are  per¬ 
fectly  reasonable  business  objectives. 

Thus,  no  matter  how  heated  the  de¬ 
bates  over  U.S.  job  losses,  wage  cuts 
and  even  national  security  risks,  com¬ 
panies  will  do  what  they  believe  is  in 
their  interest.  The  challenge  for  the 


U.S.  IT  community  is  to  continue  to 
demonstrate  that  hiring  American  soft¬ 
ware  and  services  talent  is  a  sound 
business  decision.  Fortunately,  this 
shouldn’t  be  that  hard.  The  potential 
for  software  innovation  is  as  great  as 
ever,  and  the  market  will  be  much  big¬ 
ger  than  any  one  nation  can  handle. 

The  bottom  line  is  that  no  workers 
have  benefited  more  from  globaliza¬ 
tion  than  IT  professionals.  It’s  what 
most  of  our  giant  corporate  networks 
were  designed  to  support.  To  protest 
that  globalization  is  now  harming  U.S. 
IT  workers  is  essentially  hypocritical 
and  largely  pointless.  Global  competi¬ 
tion  doesn’t  come  with  guarantees,  but 
its  long-term  results  are  hard  to  argue 
with.  Software  globalization  will,  on 
balance,  be  a  good  thing,  with  many 
unforeseen  benefits.  We  should  do  our 
best  to  accept  it.  I 


WANT  OUR  OPINION? 

©More  columnists  and  links  to  archives  of  previous 
columns  are  on  our  Web  site: 

www.computerworld.com/columns 


READERS’  LETTERS 


Flexibility  Key  to 
Managing  Projects 

Tom  P0HLMANN,  the  author  of 
the  Forrester  Research  report 
“How  Companies  Govern  Their  IT 
Spending,"  cites  a  high  rate  of  fail¬ 
ure  in  projects  [“Value  of  Project 
Management  Offices  Questioned," 
QuickLink  39998],  At  the  same 
time,  he  points  out  the  “process 
cop"  mentality  that's  present  in  too 
many  project  management  offices 
(PMOs).  Rather  than  ensuring  that 
projects  run  well,  the  PMOs  get 
bogged  down  in  creating  and  mon¬ 
itoring  processes. 

My  hunch  is  that  these  process¬ 
es  are  rote  activities,  put  in  place 
to  satisfy  some  model  or  standard. 
As  a  process  improvement  profes¬ 
sional,  I  have  been  frustrated  when 
working  with  executives  who  issue 
mandates  to  “be  CMM  Level  3"  or 
“become  ISO-certified,”  often  with 
an  arbitrary  deadline.  They  then 
brush  off  their  hands  and  wait  for  a 
miracle  to  happen.  After  all,  the 
PMOs  will  know  what  to  do. 

But  it’s  no  surprise  that  project 
managers  who  are  expected  to  do 
someone  else’s  job  would  respond 
with  a  minimalist,  policing  interpre¬ 
tation.  They  will  do  as  little  as  pos¬ 
sible  until  it  the  entire  initiative 


goes  away,  or  they  might  even  sab¬ 
otage  the  project.  PMOs  could 
benefit  from  an  independent  entity 
that  lets  them  and  executive  man¬ 
agement  know  how  things  are 
working. 

This  entity  should  be  savvy  in 
project  management,  business 
management  and  technical  do¬ 
mains.  You  don’t  want  someone  in 
this  role  who  is  only  qualified  to  re¬ 
port,  “You  missed  Step  25.  Don’t 
do  it  again  or  I’ll  tell  on  you."  I  once 
had  a  client  who  required  anyone 
seeking  promotion  to  management 
to  hold  this  process  and  product 
assurance  role  for  at  least  one 
year,  and  it  definitely  raised  the  cal¬ 
iber  of  personnel  applying  for  the 
positions.  This  in  turn  increased 
the  value  of  this  function. 

What  difference  would  these 
approaches  make  on  the  situation 
reported  by  Pohlmann?  For  one 
thing,  processes  would  become 
tools  to  help  the  PMOs  ensure  that 
project  objectives  are  met.  Out¬ 
comes  from  using  or  waiving  these 
processes  would  be  interpreted 
based  on  risks  and  benefits,  not 
merely  as  the  ability  to  check  a  box 
on  a  compliance  list.  Reporting 
of  these  outcomes  would  occur  in 
a  blame-free  environment  and 
would  allow  data  to  flow  to  the 
PMOs,  rather  than  forcing  them  to 


go  find  it.  This  would  allow  the 
PMOs  to  manage  projects,  not  play 
process  cop. 

Shawn  Presson 
Director  of  organizational 
practice,  ITS  Services  Inc., 
Springfield,  Va., 
spresson@itssinc.com 

What  Makes 
Projects  Run  Late 

I  FOUND  THE  ARTICLE  “Value  of 
Project  Management  Offices 
Questioned"  to  be  interesting  and 
thought-provoking.  But  I'm  not 
sure  you  can  assert  that  process 
impedes  the  overall  delivery  date  of 
a  project.  It's  my  belief  that  repeat- 
able  processes  improve  the  deliv¬ 
ery  rate.  In  my  experience,  projects 
are  delivered  late  mostly  because 
of  poor  estimates  and  delays  in  re¬ 
ceiving  authorization  from  senior 
management  to  complete  a  phase. 
As  far  as  reports  for  senior  man¬ 
agement,  it's  up  to  those  managers 
to  determine  their  frequency,  but 
they  should  factor  the  appropriate 
amount  of  reporting  into  the  proj¬ 
ect  budget. 

John  Reaves 

Senior  project  manager,  Wa¬ 
chovia  Corp.,  Charlotte,  N.C., 
john.reaves@wachovia.com 


Bye-bye,  Jobs 

I  SUSPECT  offshore  outsourcing 
will  have  a  bigger  impact  than 
Gartner  thinks  [“Gartner  Says  5% 
of  Corporate  IT  Jobs  Could  Go  Off¬ 
shore  by  2005,”  QuickLink 
40344],  Once  a  company  has 
started  down  the  path  of  sending 
jobs  overseas,  what  reason  would  it 
have  for  adding  new  jobs  in  the 
U.S.?  If  Gartner  is  correct  about  the 
percentage  of  jobs  that  will  be  sent 
overseas,  then  within  20  years 
there  may  not  be  any  U.S.  IT  jobs 
as  we  know  them.  And  we  will  also 
need  to  cut  back  on  the  number  of 
colleges  and  universities  offering 
computer  science  degrees. 

David  Williams 
Irving,  Texas 
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Include  an  address  and  phone  num¬ 
ber  for  immediate  verification. 
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This  is  the  next  wave 


HIGH  PERFORMANCE  SQL 


For  your  next  generation  of  applications, 
move  to  the  next  generation  of  database  technology: 
Cache,  the  post-relational  database. 

What  makes  Cache  “post-relational”?  It  provides 
developers  three  integrated  data  access  options  which 
can  be  used  simultaneously  on  the  same  data:  an 
advanced  object  database,  high-performance  SQL, 
and  rich  multidimensional  access. 

Because  Cache’s  architecture  is  a  multi¬ 
dimensional  structure,  applications  built  on  it  are 
massively  scalable  and  lightning-fast. 

Plus,  no  mapping  is  required  between  object, 
relational,  and  multidimensional  views  of  data. 

This  means  huge  savings  in  both  development  and 
processing  time.  And,  Cache-based  applications 
don’t  require  frequent  database  administration  or 
hardware  and  middleware  upgrades. 


More  than  just  a  database  system,  Cache 
incorporates  a  powerful  Web  application  develop¬ 
ment  environment  that  dramatically  reduces  the 
time  to  build  and  modify  applications. 

The  reliability  of  Cache  is  proven  every  day  in 
“life- or- death”  applications  at  hundreds  of  the  largest 
hospitals.  Cache  is  so  reliable,  it’s  the  world’s  leading 
database  in  healthcare  -  and  it  powers  enterprise 
applications  in  financial  services,  government  and 
many  other  sectors. 

We  are  InterSystems,  a  specialist  in  database 
technology  for  25  years.  We  provide  24x7  support 
to  four  million  users  in 


88  countries.  Cache  is 
available  for  Windows, 
Open  VMS,  Linux  and 
major  UNIX  platforms. 
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Make  Applications  Faster 


Download  a  fully-functional  version  of  Cache  or  request  it  on  CD  for  free  at  www.lnterSystems.com/post-relational 
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Piecing  Together  the  Data  Picture 

Data  quality  goes  beyond  mere  data 
cleansing  and  transformation;  it  can  make 
or  break  a  CRM  application  and  even  make 
the  difference  in  a  company’s  survival. 

Page  26 


QUICKSTUDY 

RosettaNet 

This  emerging  set  of  XML- 
based  standards  is  aimed 
at  letting  businesses  align  spe¬ 
cific  processes  with  those  of 
trading  partners.  Page  28 


CASE  STUDY 

Averting  an  IT  Collision 

Faced  with  the  need  to  streamline 
its  IT  infrastructure  after  an  acqui¬ 
sition,  Liberty  Northwest  turned  to 
Web-to-host  technology  to  bring 
its  systems  together.  Page  30 


■  Volkswagen’s 
Autostadt  shifts 
into  systems 

integration  overdrive  to  wow 
theme-park  visitors  and 
hopefully  convert  them  into 
buyers  of  Beetles  and  Bent¬ 
leys.  By  Julia  King 

IN  1999,  VOLKSWAGEN  AG’s  top  executives  direct¬ 
ed  Chief  Technology  Officer  Claus  Hohmann  and 
his  IT  team  to  design  and  build  an  IT  infrastruc¬ 
ture  that  would  flawlessly  support  a  unique  and 
highly  customer-centric  automotive  theme 
park.  The  idea  was  to  create  a  spectacu¬ 
lar  and  ever-changing  marketing  venue 
where  visitors  could  experience  state- 
of-the-art  automotive  technology.  Buy¬ 
ers  would  pick  up  their  new  cars  from 
one  of  the  park’s  two  gleaming  20-story, 
fully  automated  glass-and-steel  towers 
(see  photo,  left). 

The  Autostadt,  or  “car  city,”  which  is  near 
Wolfsburg,  Germany,  celebrates  its  third 
birthday  this  month  and  has  attracted  more 
than  6  million  visitors.  Some  6,000  per  day 
have  toured  its  car  museum  and  six  brand 
pavilions,  which  offer  a  variety  of  interactive 
and  computerized  exhibits  and  Web-based 
point-of-information  (POI)  terminals. 
They’ve  dined  in  the  park’s  restaurants 


and  bars  and  shopped  in  its  stores,  paying  for 
goods  and  services  with  computerized  stored- 
value  cards  issued  upon  arrival.  Perhaps  most  im¬ 
portant,  349,000  of  Autostadt’s  visitors  have  taken 
delivery  of  new  cars.  This  is  the  theme  park’s  key 
success  indicator,  since  its  ultimate  goal  is  to 
wow  every  person  who  comes  through  Autostadt 
to  the  point  of  buying  a  new  car. 

“We  are  not  a  normal  corporation  where  we 
have  a  headquarters  and  a  shop  floor.  We  are  pro¬ 
ducing  adventures  and  values,  “  says  Hohmann, 
who  came  to  the  Autostadt  from  Volkswagen’s 
Skoda  Auto  AS  unit  in  the  Czech  Republic.  To  do 
that,  he  says,  “we  have  had  to  combine  different 
worlds.”  These  include  Volkswagen’s  mainframe- 
based  factory  systems,  proprietary  Unix-based 


The  Challenge:  Design  and  build  an  IT  infrastructure  to 
support  a  unique  automotive  theme  park  and  a  new-car 
delivery  center  operating  with  99.95%  uptime  at  least 
12  hours  a  day.  Create  Internet-based  applications;  in¬ 
tegrate  with  existing  mainframe  systems. 

Key  Technologies:  Vignette  V6  Content  Suite;  0racle8i 
database;  IBM  MQSeries  middleware  and  BEA  Sys¬ 
tems  Tuxedo  transaction  monitor;  Sun  Microsystems 
servers  running  Solaris;  Cisco  networking  gear. 

The  Cost:  $500  million.  “Cheaper  than  Matrix: 

Reloaded,"  says  CIO  Michal  Bruna. 

The  Payoff:  About  349,000  of  Autostadt's  visitors 
have  left  with  new  Volkswagen  cars.  Customer  satis¬ 
faction  ratings  consistently  exceed  98%.  In  three 
years,  Autostadt  has  never  lost  any  data  or  experienced 
any  significant  network  or  systems  problems. 
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systems  that  run  the  car  towers,  plus 
various  packaged  and  proprietary 
Web-based  applications  written  in  Java 
for  reservations,  customer  service  and 
multimedia  entertainment  systems. 

All  of  this  information  comes  to¬ 
gether  at  Autostadt  over  a  three-tier 
information  architecture  called  the 
Integrated  Autostadt  System  (IAS).  At 
its  center  is  Vignette  Corp.’s  V6  Con¬ 
tent  Suite  software,  which  functions  as 
the  Web-based  window  through  which 
information  about  car  deliveries,  event 
bookings  and  daily  ticketing,  plus 
reservations  for  the  Autostadt-owned 
Ritz-Carlton  Hotel,  is  drawn  together 
(see  diagram  below).  The  system  pre¬ 
sents  information  to  Autostadt  and 
Volkswagen  employees  based  on  their 
predefined  roles. 

“This  provides  optimized  process 
support  and  covers  all  data  protec¬ 
tion,”  explains  Bruna.  The  architecture 
also  provides  Internet  and  intranet  ser¬ 
vices  that  let  customers  and  employees 
access  more  general  information. 

Online  interfaces  link  the  Vignette 
server  to  a  centralized  Oracle8i  data¬ 
base  into  which  these  various  back-end 
systems  funnel  data.  The  interfaces  use 
IBM’s  MQSeries  middleware  and  BEA 
Systems  Inc.’s  Tuxedo  transaction 
monitor.  Until  last  month,  the  Oracle 
database  ran  on  two  Sun  Enterprise 
4500  database  servers  with  Sun  Clus¬ 
ter  2x  software.  But  Autostadt  swapped 
these  out  one  recent  night  for  Sun  Fire 
4800  servers  running  Solaris  9.0. 

“The  migration  went  so  successfully 
and  we  were  done  so  quickly  that  we 


even  had  to  wait  for  the  first  test  users 
[to  come  in  the  next  morning],”  says 
CIO  Michal  Bruna. 

Burning  the  midnight  oil  on  changes 
and  fixes  is  one  of  the  key  IT  chal¬ 
lenges  as  well  as  a  point  of  pride  at 
Autostadt.  All  software  and  hardware 
upgrades  and  other  changes  must  take 
place  after  visiting  hours.  That  means 
after  10  p.m.,  since  the  park  is  open 
seven  days  a  week,  52  weeks  a  year, 
and  all  systems  must  operate  at  99.95% 
reliability  for  at  least  12  hours  per  day. 

Preparing  for  the  server  swap  in¬ 
volved  synchronizing  all  transactions 
and  having  the  new  machines  in  place 
and  tested  so  they  could  communicate 
with  the  network,  explains  Bruna.  Dur¬ 
ing  the  cutover,  “there’s  no  Internet,  no 
IAS,  the  Sun  environment  is  dead,” 
Bruna  says. 

Swapping  Servers 

The  good  news  is  that,  thanks  to  exten¬ 
sive  training  of  in-house  IT  staff  and 
plenty  of  hands-on  practice,  Autostadt 
has  been  able  to  cut  loose  all  external 
vendor  consultants  and  contractors 
who  helped  build  the  initial  Autostadt 
IT  architecture.  Initially,  20  contrac¬ 
tors  from  Gedas,  a  German  systems 
integration  firm  partially  owned  by 
Volkswagen,  helped  develop  and 
implement  the  systems. 

What’s  more,  Bruna  says,  because  of 
the  internal  IT  group’s  expertise,  Auto¬ 
stadt  has  been  able  to  downgrade  ser¬ 
vice  and  support  contracts  with  Sun 
and  its  other  hardware  providers. 

On  the  software  side,  the  Vignette 
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system  functions  as  the  digital  heart 
and  soul  of  the  IAS  and  Autostadt  as  a 
whole.  “Vignette  is  not  a  solution  it¬ 
self,  but  it  is  our  development  environ¬ 
ment,  our  tool  kit  for  making  applica¬ 
tions  and  an  area  in  which  we  now 
have  huge  know-how,”  Bruna  says. 

He  estimates  that  Autostadt  has  be¬ 
tween  500  and  600  templates  on  its 
Vignette  servers.  The  Vignette  system 
has  two  components:  the  content  man¬ 
agement  system,  which  runs  on  two 
Sun  Netra  T1  servers,  and  the  content 
delivery  system,  which  runs  on  four 
Sun  420  servers.  The  IT  staff  includes 
three  full-time  Vignette  developers, 
who  receive  two  to  three  weeks  of  ad¬ 
vanced  Vignette  training  each  year. 

Autostadt  began  using  Vignette 
StoryServer  Version  4.2  in  June  2000. 

A  key  selling  point  was  its  use  of  tem¬ 
plates  to  separate  content  and  format 
as  well  as  its  overall  ease  of  use.  Vi¬ 
gnette  developers  handle  the  design 
and  associated  back-end  data  calls  and 
connections  for  all  templates,  which 
nontechnical  users  can  then  populate 
with  changing  Web  page  content. 

One  of  the  biggest  integration  chal¬ 
lenges  is  negotiating  the  IAS’s  sophisti¬ 
cated  security  mechanisms  “to  pull  all 
of  the  information  I  need  to  publish  to 
the  right  people,”  says  Vignette  devel¬ 
oper  Uwe  Hollatz.  To  get  production 
manufacturing  information  from 
Volkswagen’s  mainframe  system,  for 
example,  the  Autostadt  uses  RVS,  a 
system  to  share  flies  to  authenticated 
users  over  a  remote  directory. 

“The  data  structure  of  these  files  is 
known,  so  I  can  write  a  filter  in  TCL 
[Tool  Command  Language]  to  parse 
the  files  and  store  the  results  in  our 
Oracle  database.  From  this  database,  I 
have  all  the  possibilities  to  publish  the 
data  to  the  channels  that  are  needed 
because  the  Vignette  system  uses  this 
database  as  the  content  database  for  its 
delivery  applications,”  Hollatz  says. 

The  Autostadt’s  various  channels  in¬ 
clude  two  completely  new  Web  sites, 


the  POI  terminals  scattered  through¬ 
out  the  park  and  an  intranet. 

The  ability  to  separate  content  and 
format  means  that  new  Web  pages  can 
be  produced  quickly  and  easily,  with  a 
minimum  of  specialist  skills.  This  in 
turn  allows  for  more  content  contribu¬ 
tors,  which  Hohmann  notes  is  critical 
to  Autostadt’s  mission  of  providing  an 
ever-changing  venue  to  Autostadt’s 
physical  and  digital  visitors. 

Since  its  opening,  Autostadt  has  mi¬ 
grated  to  Vignette  V6  Content  Suite, 
which  uses  a  newer  TCL  interpreter 
and  has  several  new  and  improved 
functions,  including  new  services  to 
build  reports  and  the  ability  to  dock 
onto  a  servlet  engine  such  as  Apache 
Software  Foundation’s  Tomcat  or 
BEA’s  WebLogic  to  deliver  Java  appli¬ 
cations,  according  to  Hollatz.  These 
small  servlet  applications,  usually 
written  in  Java,  enhance  the  display 
and  delivery  of  Web  pages. 

The  new  Web  sites  include  www. 
autostadt.de,  where  consumers  can 
buy  tickets,  reserve  a  hotel  room  or 
learn  more  about  the  theme  park  and 
educational  and  entertainment  events, 
and  www.autosphere.autostadt.de, 
which  features  flash  animations,  films 
and  music  for  visitors  with  a  high¬ 
speed  Integrated  Services  Digital  Net¬ 
work  or  Asymmetric  Digital  Sub¬ 
scriber  Line  connection.  Both  sites  are 
populated  with  content  from  the  Vi¬ 
gnette  server  and  were  completed  by 
the  three  in-house  Vignette  develop¬ 
ers,  who  worked  on  them  full  time  for 
six  months. 

Guy  Crease,  an  analyst  at  Boston- 
based  Aberdeen  Group  Inc.,  says  Auto¬ 
stadt  has  put  a  unique  twist  on  content 
management  by  doing  it  in  such  a 
“strategic  marketing  fashion.”  He  also 
describes  Autostadt’s  “unified  ap¬ 
proach”  to  content  management  as 
“quite  rare.”  Typically,  Crease  says, 
large  organizations  have  multiple  con¬ 
tent  management  systems,  with  differ¬ 
ent  business  units,  regional  offices  and 
country  groups  developing  idiosyn¬ 
cratic  sites  internally  and  externally. 

Such  a  reaction  is  in  line  with  Auto¬ 
stadt’s  business  goal,  which  is  to  stand 
out  from  the  crowd  by  offering  visitors 
a  one-of-a-kind  experience.  “The  dan¬ 
ger  here,”  says  Hohmann,  “would  be 
becoming  a  normal  corporate  office.”  I 

WHEN  IT  EXPERTISE  ISITT  ENOUGH 


At  Autostadt,  IT  staffers  are  hired  for  their  strong 
analytic  skills  rather  than  just  technical  expertise. 
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Learn  how  Autostadt  upgraded  to  a  voice-over-IP 
telecommunications  system  overnight: 
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where  information  lives 


The  world’s  leading  information  storage  system  just  got  better.  Introducing  the  enhanced 
Symmetrix9  DMX.  New  high-end  and  entry-level  options.  The  industry’s  best  non-disruptive 
capabilities.  The  ability  to  replicate  more  data,  more  cost-effectively  —  across  the  room  or 
across  the  ocean.  Rapid  innovation  from  EMC,  where  information  lives. 
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DATA  QUALITY 
TRANSLATES  INTO 
COMPANIES  HAVING 
THE  RIGHT  INFOR¬ 
MATION  AT  THE 
RIGHT  TIME  TO 
MAKE  DECISIONS. 
BY  SAMI  LAIS 


OOR  DATA  QUALITY 
can  confuse  your  cus¬ 
tomers,  undermine  your 
applications  or  even  put 
you  out  of  business  — 
and  there’s  everything 
in  the  world  you  can  do 
about  it. 

More  than  simple 
data-cleansing,  which  involves  correct¬ 
ing  a  misspelled  name  or  changing  “Av¬ 
enue”  to  “Street,”  a  data  quality  initia¬ 
tive  addresses  more  complex  and  sub¬ 
tle  problems. 

For  example,  one  New  York  bank 
that  had  a  3%  to  5%  bad-debt  ratio  on 
its  credit  card  operation  acquired  an¬ 
other  bank,  says  Aaron  Zornes,  a 
San  Francisco-based  analyst  at  Meta 
Group  Inc.  “It  turns  out  that  the  ac¬ 
quired  bank  had  a  15%  bad-debt  ratio. 
The  New  York  bank  took  over,  and  the 
bad  debt  nearly  put  them  out  of  busi¬ 
ness,”  he  says. 

If  the  acquiring  bank  had  had  a  data 
quality  initiative  to  run  large  database- 
comparison  jobs  off-line,  the  problem 
could  have  been  averted,  says  Zornes. 
Bank  managers  could  have  predicted  the 
loan  default  rate  by  comparing  the  out¬ 
standing  debt,  incomes  and  even  partial 
ZIP  codes  of  the  acquired  bank’s  credit 
card  customers  against  a  historical 
database  of  similar  customer  profiles. 

“They  would  have  been  able  to  tell 
that  this  company  wasn’t  a  good  buy,” 
Zornes  says.  “Enterprises  cannot  af¬ 
ford  to  wait  on  data  quality  efforts.” 

Data  quality  initiatives  are  critical  to 
enterprise  applications  such  as  CRM 
and  ERP  systems,  Zornes  notes.  And 
according  to  The  Data  Warehousing 
Institute  in  Seattle,  data  quality  prob¬ 
lems  cost  U.S.  businesses  more  than 
$600  billion  per  year. 

“The  basis  of  any  CRM  system  is  the 
integrity  of  the  data,”  says  Steve  Deeb, 
vice  president  for  CRM  at  Monster 
Worldwide  Inc.  in  Maynard,  Mass.  “Any 
and  ail  processes  are  driven  by  that  data.” 


PIECING 


In  addition  to  business  needs,  there 
are  now  regulatory  pressures  to  main¬ 
tain  better  data,  Zornes  says.  “If  some¬ 
one  has  bought  a  large  amount  of  am¬ 
monia-based  fertilizer,  then  rents  a  car,” 
the  U.S.  Department  of  Homeland  Se¬ 
curity  wants  to  know  about  it,  he  says. 
“And  this  isn’t  information  you  can  wait 
months  or  even  a  week  to  find  out.” 

The  tools  to  to  improve  data  quality 
exist,  says  Zornes,  but  although  “busi¬ 
nesses  give  lip  service  to  the  need  for 
data  quality,  too  often  they  don’t  do 
anything  about  it.” 

James  Eardley,  a  managing  director 
of  CRM  at  FleetBoston  Financial 
Corp.,  agrees.  “Data  quality  gets  short 
shrift  too  often.  It’s  not  important  until 
you  need  it,”  he  says. 

Although  in  dissimilar  industries, 
FleetBoston  and  Monster  both  use 
CRM  software  from  Siebel  Systems 
Inc.  in  San  Mateo,  Calif.,  and  faced 
similar  data  quality  problems.  Dupli¬ 
cate  records  in  customer  and  contact 
databases  meant  one  department  didn’t 
know  what  another  was  doing. 

“What  we  were  missing  was  a  total 
picture  of  the  customer  relationship. 
We  have  multiple  business  sales  forces 
following  a  single  customer.  It’s  hard 
enough  to  get  one  business  unit’s 
data  clean.  We  now  have  24,” 
Eardley  says. 

“There’s  no  consistency 
with  how  users  enter  cus¬ 
tomer  and  contact  records,” 
he  continues.  “Some  people 
use  upper-  and  lowercase; 
others  use  all  uppercase.” 
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Today  FleetBoston’s  system  standard¬ 
izes  the  data  elements  and  does  ZIP 
code  lookups. 

The  company  opted  for  data  quality 
software  from  FirstLogic  Inc.  in  La 
Crosse,  Wis.  Those  tools,  coupled  with 
the  Siebel  software,  “seemed  to  do  ex¬ 
actly  what  we  needed,”  Eardley  says. 

To  prevent  duplicate  entries,  when  a 
user  enters  a  record,  the  FirstLogic 
system  generates  a  token,  which  it 
compares  to  others  to  see  if  the  data¬ 
base  has  similar  tokens.  If  it  finds  any, 
it  shows  them  to  the  user  to  determine 
whether  the  record  is  a  duplicate. 

“We  had  to  work  a  little  bit  to  get 
the  tokens  to  our  liking,  and  then  it 
worked  fine,”  Eardley  says.  “We  also 
run  batch  jobs  monthly  to  identify  and 
fix  any  duplicates.”  Any  records  that 
the  system  can’t  resolve  go  to  the  busi¬ 
ness  side  for  review. 

Monster  Problem 

Similar  data  inconsistencies  under¬ 
mined  confidence  in  Monster’s  system, 
says  Deeb.  Duplicates  and  unidentified 
accounts  in  the  Siebel  system  made  it 
difficult  to  know  which  database  to  use 
for  ordering  or  invoicing,  he  says.  And 
the  sales  staff  wasn’t  getting  the  sup¬ 
port  it  needed. 

Initially,  Deeb  says,  “we  didn’t  see  a 
product  that  mapped  directly  into 
what  we  were  doing.”  But  after  build¬ 
ing  its  own  address-matching  applica¬ 
tion,  the  company  found  that  it  needed 
a  more  strategic  tool  and  more  sophis¬ 
ticated  analysis  than  its  in-house  appli¬ 
cation  could  offer. 

About  a  year  and  a  half  ago,  Monster 
took  another  look  at  the  field  and 
chose  the  Trillium  Siebel  connector 
from  Trillium  Software,  a  division  of 
Harte-Hanks  Inc.  in  Billerica,  Mass. 

“When  we  were  looking  at  the  ROI, 
the  ease  with  which  the  Trillium  prod¬ 
uct  could  be  integrated  into  our  systems 
was  attractive,”  Deeb  says.  “We  lever¬ 
aged  the  strength  of  the  Trillium  core 
product  —  such  as  the  way  name  and 
address  databases  from  around  the 
world  can  be  plugged  in  —  and  integrat¬ 
ed  it  into  our  processes  in  a  way  that 
made  sense  to  the  way  we  do  business.” 

Now,  when  a  record  is  entered,  the 
system  evaluates  in  real  time  whether 
it’s  new  or  a  modification  of  an  exist¬ 
ing  record.  The  company  also  runs 
data  quality  checks  in  batches  to  en¬ 
sure  that  duplicates  aren’t  introduced 
when  it  incorporates  a  new  mailing  list 
into  its  existing  database.  They’re  also 
performed  at  regular  intervals  to  mini¬ 
mize  data  degradation.  In  addition  to 
the  IT  resources  dedicated  to  main¬ 
taining  data  quality,  business  staffers 


COMPUTERWORLD  August  11, 2003 


27 


FOUR  WAYS  TO  BUILD  A  MASTER  FILE 


1 


Synchronized  master.  Use  middleware  to  synchronize  data  in  its  native 
store  and  create  a  logical  master  in  real  time.  Best  for  companies  with 

low  data  velocity. 


2 


Application-specific  master.  Pick  one  operational  application,  such 
as  CRM,  to  be  the  master.  Best  for  companies  with  data  primarily 
in  one  application. 


3 

4 


Customer  master  overlay.  Use  a  third-party,  application-agnostic  overlay, 
a  common  choice  of  big  banks  and  insurance  companies.  Best  for  vertical 
industries,  such  as  banking,  insurance  and  travel. 

Data-warehouse-based  master.  Create  a  data-store-like  structure  to 
straddle  operational  and  analytical  environments.  The  store  holds  recent, 
transaction-level  data;  the  warehouse  holds  summaries  and  data  analyses. 
Best  for  companies  with  low  operational  data  latency  needs. 


SOURCE:  META  GROUP  INC  .  STAMfORD.  CONN. 


are  also  assigned  to  monitor  the  sys¬ 
tem  and  resolve  anomalies. 

It’s  the  essence  of  analytical  CRM, 
Deeb  says.  “Real-time  analysis  to  de¬ 
termine  the  right  offer  to  the  right  cus¬ 
tomer  at  the  right  time  in  a  predictable 
manner  is  driven  by  the  quality  of  cus¬ 
tomer  data  supporting  that  analysis,” 
he  says. 

But  most  companies  believe  that 
their  data  is  cleaner  and  more  accurate 
than  it  is,  says  Wayne  Eckerson,  The 
Data  Warehousing  Institute’s  education 
and  research  director.  He  cites  as  one 
example  an  insurance  company  that 
each  month  gets  2  million  claims,  each 
with  377  data  elements.  At  an  error  rate 
of  0.1%  for  all  claims  data,  that’s  more 
than  754,000  errors  monthly,  which 


FOUR  ENEMIES 
OF  DATA  QUALITY 

Denial.  IT  managers  assume  that 
old  data  will  serve  new  uses  with¬ 
out  being  re-engineered. 

Deception,  b  ;  so  that  their 
new  ERP  or  CRM  software  will 
solve  the  problem. 

Deflection.  nihili¬ 

ty-  for  data  quality  to  someone  else  ~ 
usfirs.  IT,  those  doing  data  entry  or 
ntegra 

Deferral. 

they  can  put  off  fixing  data  quality 
fflented. 
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amounts  to  9.04  million  errors  annually. 
If  10%  of  data  elements  are  critical  to 
its  business  decisions,  the  company 
each  year  must  correct  more  than  1  mil¬ 
lion  errors  that  could  damage  its  ability 
to  conduct  business.  Estimating  the 
risk  cost  at  $10  per  error,  poor  data 
quality  costs  the  company  $10  million 
annually  in  erroneous  payouts. 

“It’s  bewildering,”  says  Eckerson, 
“but  almost  half  of  all  companies  have 
no  plan  for  managing  data  quality.”  Re¬ 
sponsibility  for  data  quality  often  rests 
with  IT  staffers,  who  make  their  deci¬ 
sions  based  on  the  tools  available. 

Data  Quality  Means  Business 

“First  and  foremost,  data  quality  is  a 
business  issue,”  says  Ted  Friedman,  an 
analyst  at  Gartner  Inc.  in  Stamford, 
Conn.  “But  the  solution  is  the  prover¬ 
bial  three-legged  stool:  people,  process 
and  technology.” 

The  first  step  in  a  data  quality  initia¬ 
tive  is  to  analyze  what  the  data  is  and 
how  it’s  used,  Friedman  says. 

GMAC  Mortgage  Corp.  in  Horsham, 
Pa.,  followed  this  measured  course  in 
its  data  quality  initiative.  When  inter¬ 
est  rates  went  into  free-fall  a  year  and 
a  half  ago,  the  First  thing  the  company’s 
CEO  wanted  employees  to  do  “was 
cope  with  a  300%  to  400%  increase  in 
daily  business  of  people  refinancing 
mortgages,”  says  David  Adams,  GMAC’s 
enterprise  data  access  manager. 

Tuning  the  Oracle  database  that  sup¬ 
ported  application  processing  im¬ 
proved  performance,  he  says,  “but  it 
also  opened  our  eyes  to  the  need  to  go 
further  and  address  the  quality  of  the 
data  itself.”  And  with  GMAC  begin¬ 
ning  a  major  overhaul  of  its  data  ware¬ 
house  —  “actually,  it  was  more  a  large 
tank  of  data  than  a  data  warehouse,” 


says  Adams  —  the  timing  was  right  to 
launch  a  data  quality  initiative. 

“To  compete  on  the  other  side  of  the 
refinancing  boom,  we  were  going  to 
have  to  have  better,  cleaner  data  to  get 
the  accurate  analyses  that  the  CEO 
wanted  and  that  we  needed  to  make  the 
most  of  our  operation,”  he  says. 

Adams  brought  in  a  data  quality 
consultant  to  explain  to  the  executive 
council  what  the  project  would  entail. 
Adams  and  his  team  researched  the 
data  quality  tools,  ran  two  pilots  and 
then  selected  software  from  Ascential 
Software  Corp.  in  Westboro,  Mass.  The 
Ascential  product  was  more  expensive 
and  took  more  work  to  get  going  than 
some  less  sophisticated  tools,  he  says. 
But  Adams  was  sold  on  the  software’s 
heuristic  logic,  which  let  it  adapt  to 
GMAC’s  operation. 

“The  ETL  [extract,  transform  and 
load]  technology  is  pretty  mature,  and 
it  works  well,”  says  Adams.  “But  it’s  the 
data  quality  and  metadata  stuff  that’s 
going  to  give  you  the  great  advances.” 

Physically  merging  databases  would 
have  required  that  every  division  agree 
on  a  single  definition  for  each  data  ele¬ 
ment,  which  was  “probably  impossi¬ 
ble,”  Adams  says. 

Instead,  metadata  resides  in  Ascential 
DataStage  and  links  divisional  databas¬ 
es  at  the  logical  level,  with  “pointers” 
indicating  the  source  of  the  data.  Each 
division’s  database  remains  inviolate. 

Each  division  can  decide  what  data 
can  be  shared  and  with  whom,  which  is 
important  for  adhering  to  government 
regulations.  Other  tools  couldn’t  deliver 
that  granularity  of  control,  says  Adams. 

The  team  installed  the  software  in 
January  and,  working  with  the  data 
warehousing  team,  went  live  in  May 
with  a  relatively  small  application  for 
new  credit  policy  reporting.  The  first 
large  data  mart,  to  support  all  report¬ 
ing  for  GMAC’s  wholesale  operations, 
will  go  live  Aug.  15. 

“Information  is  a  critical  asset,”  says 
Meta’s  Zornes.  “We  need  to  change  the 
way  we  think  about  it.  It  may  sound 
like  science  fiction  now,  but  in  the  fu¬ 
ture,  companies  will  certify  informa¬ 
tion  the  way  we  certify  works  of  art 
and  financial  instruments,  i.e.,  by  as¬ 
signing  that  information  asset’s  value 
and  origination.”  I 


Lais  is  a  Computerworld  contributing 
writer  in  Takoma  Park,  Md. 


For  more  on  gauging  your  data  quality  needs  and 
matching  them  to  the  right  tools,  visit  our  Web  site: 


QuickLink  40427 
www.computerworld.com 
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DEFINITION 

RosettaNet  is  an  emerging  set 
of  standards  based  on  XML 
that  is  aimed  at  letting  busi¬ 
nesses  align  specific  processes 
with  those  of  trading  partners. 


BY  RUSSELL  KAY 

EMEMBER  the 
promise  of  the 
paperless  office? 
Computers  com¬ 
municating  elec¬ 
tronically  with  one  another 
were  going  to  replace  the  tons 
of  paperwork  that  character¬ 
ized  business-to-business  in¬ 
teraction:  purchase  orders,  in¬ 
voices,  payments,  confirma¬ 
tions,  documentation  —  the 
list  was  nearly  endless.  Elec¬ 
tronic  document  interchange 
(EDI)  was  going  to  be  the  sav¬ 
ior  of  our  systems  and  protec¬ 
tor  of  our  forests. 

It  didn’t  happen.  EDI  never 
met  the  challenges  of  connect¬ 
ing  scores  of  propri¬ 
etary  and  mission- 
critical  applications. 

Now,  a  new  successor 
is  stepping  up  to  the 
challenge. 

RosettaNet  is  both  a 
set  of  standards  and  a  global 
consortium  of  more  than  400 
electronic  component,  IT  and 
semiconductor  manufacturing 
companies  working  to  create, 
implement  and  promote  open 
e-business  process  standards. 
Founded  in  1998,  RosettaNet 
aims  to  align  specific  business 
processes  among  trading  part¬ 
ners  by  defining  and  standard¬ 
izing  up  to  100  e-business 
transaction  processes  so  that 
two  companies’  back-end 
systems  can  talk  directly  to 
each  other. 

RosettaNet  takes  its  name 
from  the  Rosetta  stone,  which 
a  soldier  in  Napoleon’s  army 


discovered  in  Egypt  in  1799. 
Since  it  contained  parallel  in¬ 
scriptions  in  both  Greek  char¬ 
acters  and  Egyptian  hiero¬ 
glyphics,  it  provided  a  key 
to  deciphering  ancient  Egypt¬ 
ian  writing. 

This  modern  electronic 
translator  speaks  the  contem¬ 
porary  languages  of  computer 
interoperability  —  XML  and 
SOAP  —  which  should  allow 
disparate  systems  and  busi¬ 
ness  processes  from  different 
organizations  to  understand 
and  exchange  data  with 
one  another. 

Defining  Processes 

The  consortium  began  its  Her¬ 
culean  task  by  looking 
at  supply  chain  proc¬ 
esses.  Members  used 
business-process  mod¬ 
eling  to  identify  the  el¬ 
ements  of  a  working 
business  process  and 
create  a  clearly  defined  model 
of  current  trading  partner  in¬ 
terfaces.  After  extensively  re¬ 
searching  every  level  of  the 
supply  chain,  as  well  as  ana¬ 
lyzing  misalignments  and  inef¬ 
ficiencies,  they  developed  a 
set  of  generic,  standardized 
processes  that  could  serve  as 
the  basis  for  real-world  busi- 
ness-to-business  alignment. 

These  Partner  Interface 
Processes  (PIP)  are  special¬ 
ized  system-to-system,  XML- 
based  dialogues.  Each  PIP 
specification  includes  a  busi¬ 
ness  document  and  a  detailed 
business  process  that  includes 
interaction,  data  transmission, 


security  and  error-handling 
requirements. 

PIPs  use  two  data  dictionar¬ 
ies  —  one  for  business  proper¬ 
ties  and  another  for  technical 
properties  —  that  help  differ¬ 
ent  companies  define  the 
same  product  in  exactly  the 
same  way.  The  RosettaNet 
Implementation  Framework 
defines  an  exchange  protocol, 
and  the  Message  Guidelines 
instruct  implementers  on  how 
to  encode  individual  PIPs  into 
specific  packages. 

Such  efforts  at  standardiz¬ 
ing  generic  processes  have 
been  tried  before  and  failed. 
RosettaNet,  however,  seems 
more  carefully  grounded  in 
the  real  world,  and  its  PIPs  are 
tested  by  consortium  mem¬ 
bers.  After  consortium  part¬ 
ners  have  agreed  through  a 
voting  process  that  a  PIP 
meets  industry  needs,  it  is 


then  published  on  the  Rosetta¬ 
Net  Web  site  and  is  available 
for  anyone  to  use. 

PIPs  fit  into  seven  official 
clusters,  or  groups  of  core 
business  processes,  that  repre¬ 
sent  the  backbone  of  the  trad¬ 
ing  B2B  network.  (There’s  also 
an  eighth  cluster  for  adminis¬ 
trative  purposes.)  Each  cluster 
is  broken  down  into  segments, 
which  are  cross-enterprise 
processes  that  involve  more 
than  one  type  of  trading  part¬ 
ner.  Within  each  segment,  in¬ 
dividual  PIPs  are  identified 
according  to  their  place  in  the 
cluster  hierarchy.  Thus  PIP 
3A4  (request  purchase  order) 
is  the  fourth  PIP  in  Cluster  3 
(order  management),  Segment 
3A  (quote  and  order  entry). 
Here  are  the  clusters: 

0.  RosettaNet  support:  Provides 
administrative  functionality. 

1.  Partner  product  and  service 
review:  Allows  information 
collection,  maintenance  and 
distribution  for  the  develop¬ 
ment  of  trading-partner  pro¬ 
files  and  product-information 
subscriptions. 

2.  Product  information:  En¬ 
ables  the  distribution  and 


Using  RosettaNet  PIPs 
For  Order  Management 

In  this  scenario,  based  on  a  real  implementation  by  Intel  Corp.  and  one  of  its 
distributors  ( www.intel.eom/ebusiness/H/solution/wp030602.htm ),  the  use 
of  RosettaNet  PIPs  for  standardizing  back-end  computer-to-computer 
interaction  helps  eliminate  many  manual  steps.  Humans  are  involved  in 
making  decisions  and  changes,  but  the  systems  perform  validation  checks 
and  trigger  new  actions  based  on  previous  transactions. 


Customer 

RosettaNet  PIPs 

Supplier 

Purchasing: 

Customer  service: 

Buyer  creates  purchase 
order  in  ERP  system. 

3A4  (request 
purchase  order) 

Seller  receives  purchase 
order  in  ERP  system. 

Buyer  receives  purchase . 
order  change  in  ERP. 

3A7  (notify  of  pur¬ 
chase  order  update) 

Seller  initiates  purchase 
order  change  in  ERP. 

Buyer  initiates  pur¬ 
chase  order  change 
request  in  ERP. 

3A8  (request  pur¬ 
chase  order  change) 

Seller  receives  pur¬ 
chase  order  change 
request  in  ERP. 

Receiving: 

Warehouse: 

Buyer  receives  shipping 
document  in  ERP. 

3B2  (notify  of 
advance  shipment) 

Warehouse  creates  ship¬ 
ping  document  in  ERP. 

Buyer  receives 
invoice  in  ERP.  ' 

3C3  (notify  of 
invoice) 

Credit  issues  an  invoice 
document  in  ERP. 

Finance: 

Finance: 

Accountant  creates  pay¬ 
ment  advice  in  ERP. 

3C6  (notify  of 
remittance  advice) 

Credit  receives  payment 
advice  in  ERP. 

periodic  update  of  product 
and  design  information,  in¬ 
cluding  product  change  no¬ 
tices  and  detailed  technical 
specifications. 

3.  Order  management:  Sup¬ 
ports  the  full  order-manage¬ 
ment  business  area,  from  price 
and  delivery  quoting  through 
purchase  order  initiation,  sta¬ 
tus  reporting  and  manage¬ 
ment.  Order  invoicing,  pay¬ 
ment  and  discrepancy  notifi¬ 
cation  are  also  managed  using 
this  cluster  of  processes. 

4.  Inventory  management:  En¬ 
ables  inventory  management, 
including  collaboration,  re¬ 
plenishment,  price  protection, 
reporting  and  allocation  of 
constrained  products. 

5.  Marketing  information  man¬ 
agement:  Enables  communica¬ 
tion  of  marketing  information, 
including  campaign  plans, 
lead  information  and  design 
registration. 

6.  Service  and  support:  Pro¬ 
vides  postsales  technical  sup¬ 
port,  service  warranty  support 
and  asset  management  capa¬ 
bilities. 

7.  Manufacturing:  Enables  the 
exchange  of  design,  configura¬ 
tion,  process,  quality  and  oth¬ 
er  manufacturing  floor  infor¬ 
mation  to  support  a  “virtual 
manufacturing”  environment. 

While  interoperability  with¬ 
in  a  supply  chain  is  a  major 
goal,  interoperability  between 
supply  chains  is  just  as  impor¬ 
tant.  Few  companies  are  part 
of  only  a  single  supply  chain; 
most  are  involved  in  a  number 
of  them.  The  RosettaNet  mod¬ 
el  aims  to  include  components 
that  are  truly  universal,  recog¬ 
nizing  that  some  must  be 
unique  to  meet  the  special¬ 
ized  requirements  of  specific 
businesses. 

RosettaNet  seeks  to  ensure 
that  small  and  medium-size 
businesses  around  the  world 
can  implement  a  unified  ap¬ 
proach  to  e-business.  I 


Kay  is  a  Computerworld  con¬ 
tributing  writer.  You  can  reach 
him  at  russkay@charter.net. 
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Nerves  and  muscles  coordinate 
for  exceptional  physical  performance 


USSR 


(@  server 


Power  and  flexibility  coordinate 
for  exceptional  UNIX  performance 

On  de  mand. 


Introducing  the  affordable  new  IBM  eServer  pSeries™  615. 

The  human  body  performs  exceptionally.  So  does  the  IBM  server 
line  for  UNIX?  The  new  IBM  eServer  pSeries  615  offers  110%  more 
performance  than  its  powerful  predecessor,  but  at  one-third  less 
starting  costs  Prices  start  at  $5,745?  It  has  everything.  Fourth-generation 
POWER4+™  technology?  Yes.  Linux  ready?  Yes.  Autonomic  and 
self-healing  features?  Absolutely.  On  demand?  Of  course. 

eServer:  servers  for  on  demand  business. 

Can  you  see  it?  For  a  white  paper  on  why  POWER4+  and 
more  on  IBM  offerings  for  UNIX,  visit  ibm.com/eserver/p615 


'Performance  based  on  rPerf  (Relative  Performance)  results  of  2.50  for  a  1-way  p615  using  1.2GHz  POWER4+  processors  and  16GB  of  memory  vs.1.19  for  a  1-way  p€10  using  450MHz  POWER3-II  processors  and  8GB  of  memory  rPerf  is  an 
IBM  estimate  of  commercial  processing  performance.  Pricing  based  on  p615  Express  Configuration  with  1-way  1.2GHz  POWER4+  processor,  1 GB  memory  and  one  36.4GB  disk  drive  at  $5,745  vs.  p610  Express  Configuration  with  1-way 
450MHz  POWER3-II  processor,  1  GB  memory,  CD-ROM  and  one  36.4GB  disk  drive  at  $8,895.  Both  Express  Configurations  include  AIX  license  and  one  year  of  Software  Maintenance  for  AIX  Operating  Systems  (SWMA).  'For  p615  Express 
Configuration.  U.S.  list  prices  are  current  as  of  6/23/03  and  are  subject  to  change  without  notice.  Reseller  prices  may  vary.  IBM,  the  e-business  logo,  AIX,  eServer,  POWER4+  and  pSeries  are  trademarks  or  registered  trademarks  of 
International  Business  Machines  Corporation  in  the  United  States  and/or  other  countries.  UNIX  is  a  registered  trademark  of  The  Open  Group  in  the  United  States  and  other  countries.  Other  company,  product  and  service  names  may  be 
trademarks  or  service  marks  of  others.  ©2003  IBM  Corporation.  All  rights  reserved. 
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Averting  an 
IT  Collision 

Insurance  company  relies  on  host 
access  software  to  streamline  IT 
operations  and  ease  merger  integration. 
By  Linda  Rosencrance 


WHEN  LIBERTY  Northwest 
Insurance  Corp.  acquired 
North  Pacific/Oregon 
Automobile  Insurance 
companies  last  year,  it  faced  a  major 
challenge:  It  needed  to  central¬ 
ize  its  IT  infrastructure  across 
the  merged  companies,  consoli¬ 
date  multiple  emulation  plat¬ 
forms  and  make  it  easier  to 
adopt  new  technologies. 

At  the  time,  Portland,  Ore.-based 
Liberty  Northwest,  a  wholly  owned 
subsidiary  of  Boston-based  Liberty 
Mutual  Insurance  Co.,  was  primarily  a 
workers’  compensation  company, 
while  North  Pacific/Oregon  Auto  was 
mainly  a  property-casualty  company. 

The  problem  was  they  each  had  dif¬ 
ferent  host-based  platforms,  says  Eric 
Peterson,  manager  of  IT  infrastructure 
at  Liberty  Northwest. 

While  North  Pacific  was  using  Rum¬ 
ba  software  from  Cupertino,  Calif.- 
based  NetManage  Inc.  in  a  thick-client 
format,  Liberty  Northwest  was  using  a 
fledgling  version  of  ZENworks  from 
Novell  Inc.  and  a  smattering  of  soft¬ 
ware  from  Attachmate  Corp. 

After  acquiring  North  Pacific,  Liber¬ 
ty  Northwest’s  IT  infrastructure  in¬ 
cluded  a  combination  of  mainframes 
and  IBM’s  AS/400  systems,  as  well  as 
multiple  emulation  platforms  to  access 
these  host  systems,  Peterson  says. 

With  the  merger,  Liberty  North¬ 
west’s  IT  staff  had  1,000  desktops  to 
manage  in  multiple  locations  and  was 
responsible  for  consolidating  opera¬ 
tions,  moving  offices,  moving  data  cen¬ 
ters  and  upgrading  all  desktops  to 
Windows  2000.  And  the  staff  had  to 
do  all  that  without  compromising  ser¬ 
vice  and  support  to  its  business  units 
or  its  customers. 

“We  had  to  look  at  how  we  could 
make  our  lives  easier,”  Peterson  says. 


And  Liberty  Northwest  wanted  to 
make  sure  that  its  sales  agents  and  the 
sales  agents  from  North  Pacific  could 
sell  each  other’s  products,  according 
to  Peterson. 

Liberty  Northwest  decided  it 
could  meet  its  needs  with  Net- 
Manage’s  Rumba  Web-to-Host 
technology,  which  provides  cor¬ 
porate  users  with  secure,  sim¬ 
ple,  browser-based  access  to  applica¬ 
tions  on  legacy  host  systems,  says  Vi- 
jay  Lai,  director  of  product  marketing 
at  NetManage. 

Using  the  Web-to-Host  technology, 


Liberty  Northwest  was  able  to  quickly 
and  easily  deploy  the  browser-based 
software  so  host  systems  could  be 
accessed  with  a  click  of  a  mouse,  says 
Peterson.  It  allowed  the  sales  agents 
to  access  the  applications  of  either 
company  over  the  Internet  through 
a  browser. 

Rumba  Web-to-Host  provided 
sales  agents  with  a  unified  interface, 
whether  they  were  selling  products 
from  North  Pacific  or  Liberty  North¬ 
west.  But  the  technology  also  enabled 
the  North  Pacific  sales  agents  to  con¬ 
tinue  using  that  company’s  existing 
interface. 

“Rumba  Web-to-Host  extends  the 
mainframe  out  to  the  external  world,” 
says  Lai.  “With  mergers  or  acquisi¬ 
tions,  companies  have  different  sys¬ 
tems,  and  each  of  these  systems  has  a 
system  user  interface,  and  you  need  to 
be  able  to  merge  your  applications  to¬ 
gether  so  that  the  different  groups  of 
people  using  the  applications  are  all 
experiencing  the  same  look  and  feel.” 

Peterson  says  that  if  weren’t  for  the 
ability  to  centrally  configure  these 
client  sessions,  he  would  have  had  to 
go  around  and  configure  every  desktop 
manually  or,  at  the  very  least,  spend  a 
significant  amount  of  time  on  a  client 
fix,  or  reconfiguration,  in  an  automat¬ 
ed  fashion. 

“With  this  product,  I’m  able  to  sim- 


Liberty  Northwest’s  Streamlined  System 

After  Liberty  Northwest  acquired  North  Pacific/Oregon 
Automobile  Insurance  last  year,  it  consolidated  its  IT  infrastructure 
using  NetManage’s  Rumba  Web-to-Host  technology. 
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Rumba  Web- 
to-Host  extends 
the  mainframe  out  to 
the  external  world. 


VIJAY  LAL,  DIRECTOR  OF  PRODUCT 
MARKETING,  NETMANAGE 

ply  go  to  the  Web  server,  change  my 
config  files,  and  I’m  done,”  he  says.  “We 
centrally  administer  it,  so  we  can  con¬ 
trol  the  desktop  and  the  URL  for  the 
emulation  sessions.  The  only  thing  we 
allow  the  users  to  do  is  change  the  font 
colors.  If  someone  needs  to  use  an  em¬ 
ulation  session,  we  can  simply  e-mail 
them  the  URL  and  say,  ‘Here  you  go.’  ” 

Fewer  People  Required 

Peterson  says  that  because  Rumba 
Web-to-Host  is  a  single  platform,  Lib¬ 
erty  Northwest  saves  money,  since  it 
doesn’t  have  to  maintain,  administer  or 
purchase  multiple  emulators. 

“It  benefits  me  because  I  can  keep 
my  head  count  lower,”  he  says.  “I  don’t 
have  to  have  three  or  four  techs,  or 
have  my  server  guy  know  three  or  four 
different  platforms.  And  it’s  so  quick 
and  easy  to  administer,  I  only  need  one 
person  and  very  few  disciples.” 

Peterson  estimates  that  he’s  proba¬ 
bly  saving  the  equivalent  of  one  full¬ 
time  employee,  or  more. 

“When  I  have  a  change  that  impacts 
the  entire  environment  of  host  sys¬ 
tems,  the  number  of  man-hours  I  save 
is  300,”  Peterson  says.  “And  I  also  save 
the  travel  costs  to  go  around  and  touch 
every  desktop.  Now  I  do  it  in  a  matter 
of  minutes  from  one  location.” 

Lai  says  the  license  price  for  Rumba 
Web-to-Host  is  $150  per  seat.  The 
product  takes  about  30  minutes  to  in¬ 
stall  and  approximately  30  to  90  min¬ 
utes  to  configure,  he  says. 

“Deployment  —  which  happened 
last  fall  —  was  extremely  fast,”  Peter¬ 
son  says.  “The  beauty  of  it  is  the  user 
can  do  it.  You  point  him  to  this  URL 
and  say,  ‘Click  here.’  ” 

Maximilian  Flisi,  an  analyst  at  Fram¬ 
ingham,  Mass.-based  IDC,  says  cus¬ 
tomers  are  generally  satisfied  with  Net¬ 
Manage’s  Rumba  Web-to-Host  because 
it’s  easy  to  use  and  easy  to  manage. 

“The  benefit  here  is  that  there  is  a 
Web  interface  and  there  is  no  need 
for  software  on  the  desktop,”  he  says. 
“Although  there  are  about  six  other 
vendors  in  this  space,  including  IBM 
and  Attachmate,  and  they  all  have 
products  that  are  easily  deployable, 
NetManage’s  name  is  one  of  the  ones 
that  comes  up  more  often  than  other 
companies.”  I 
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Mo  Denying  New 
Switch  Vulnerability 


Exploit  code  demonstrates  how  easily 
hackers  can  take  advantage  of  a  router 
security  hole  and  launch  denial-of-service 
attacks.  By  Mathias  Thurman 


endors  of  IT  security 
products  frequently  re¬ 
lease  information 
about  vulnerabilities 
associated  with  their  software 
and  hardware.  I  receive  15  to 
20  such  advisories  every  day 
and  have  to  examine  each  one 
to  determine  whether  it’s  ap¬ 
plicable  to  our  infrastructure. 
If  the  advisory  pertains  to  a 
product  we  use,  I 
must  figure  out 
whether  it  affects  us. 

That’s  not  always 
easy.  Before  making  a 
decision,  I  need  to 
know  if  there  have 
been  any  reported 
compromises  and  if  the  ex¬ 
ploit  code  actually  works. 

I  also  review  who  released 
the  advisory,  the  potential  ef¬ 
fect  on  my  company  and  what 
resources  I’ll  need  to  mitigate 
the  vulnerability.  Getting  that 
information  requires  addition¬ 
al  research,  but  as  my  recent 
experience  shows,  that  can  be 
time  well  spent. 

Recently,  someone  released 
code  that  exploits  a  remote 
denial-of-service  vulnerability 
in  any  network  device  from 
Cisco  Systems  Inc.  that  runs 
Versions  11.x  or  12.x  of  the 
vendor’s  Internetworking  Op¬ 
erating  System  (IOS). 

Researching  the  Flaw 

Since  there  was  a  significant 
amount  of  information  both 
from  Cisco  and  on  message 
boards,  and  the  advisory  per¬ 
tained  to  versions  of  IOS  that 
we  run,  I  needed  to  do  some 
research  about  the  potential  of 
this  vulnerability. 

Reconfiguring  or  upgrading 
routers  to  cope  with  the  prob¬ 
lem  isn’t  easy,  so  I  decided  to 


find  out  more  about  the  risks 
we  faced  and  ways  we  could 
protect  ourselves  without 
causing  too  much  disruption 
to  our  operations. 

Just  as  I  started  investigat¬ 
ing  the  advisory,  a  colleague 
sent  me  two  e-mails  that  in¬ 
cluded  code  exploiting  the 
Cisco  IOS  weakness.  Rather 
than  relying  on  third-party 

opinions,  I  decided 
to  use  this  code  to 
test  the  vulnerability 
myself. 

To  exploit  this 
vulnerability,  the 
program  must  send 
a  series  of  specially 
formatted  IP  packets  with  spe¬ 
cific  protocol  types  to  the  in¬ 
terface  of  a  vulnerable  router. 

When  executed  properly, 
the  transmitted  packets  can 
cause  the  router  to  flag  the  in¬ 
put  queue  as  full.  When  this 
happens,  the  input  queue  re¬ 
fuses  any  more  packets,  caus¬ 
ing  the  denial-of-service  con¬ 
dition. 

Network  administrators 
must  then  reboot  the  router  to 
reset  the  device  and  clear  the 
problem.  If  the  router  isn’t  ac- 


Before  making  a 
decision,  I  need  to 
know  if  there  have 
been  any  reported 
compromises  and  if 
the  exploit  code 
actually  works. 


cessible  from  the  network, 
someone  must  go  to  the  data 
center  and  manually  reboot 
the  device  —  which  isn’t  much 
fun  at  3  a.m. 

The  code  I  received  by 
e-mail  wasn’t  compiled.  I 
transferred  it  from  my  desktop 
to  a  Linux  workstation  I  have 
in  the  lab  and  reviewed  it  for 
other  malicious  content. 

Once  I  had  it  compiled,  I 
needed  to  find  a  router  to  run 
tests  on.  I  talked  one  of  the 
network  engineers  into  letting 
me  borrow  a  spare  Cisco 
router,  then  asked  him  to  in¬ 
stall  one  of  the  vulnerable  ver¬ 
sions  of  IOS  and  configure  it 
in  a  way  that  should  allow  the 
exploit  to  work. 

For  the  code  to  succeed,  for 
example,  the  Time  to  Live 
(TTL)  setting  for  network 
traffic  has  to  be  less  than  2. 

TTL  is  a  value  in  an  IP 
packet  that  tells  a  router 
whether  the  packet  has  been 
in  the  network  too  long  and 
whether  it  should  be  discard¬ 
ed.  I  was  sure  that  some  of  our 
routers  had  TTL  settings 
within  the  vulnerable  limits. 

Warnings  Validated 

I  ran  a  continuous  string  of 
packet  traffic  through  the  lab 
router  while  launching  the  at¬ 
tack.  Within  seconds,  it 
stopped  processing  the  legiti¬ 
mate  packets  and  failed,  just 
as  the  advisories  had  warned. 

By  running  the  “show  inter¬ 
faces”  command  on  the  router, 
I  was  able  to  see  that  the  input 
queue  had  indeed  filled  up. 
And  sure  enough,  the  only 
way  to  reset  or  clear  the  input 
queue  was  to  reboot  the 
router. 

I  immediately  sent  out  an 
advisory  to  the  network  team 
suggesting  that  they  schedule 
an  emergency  inventory  of  all 
Cisco  routers,  switches  and 
other  devices  running  vulner¬ 
able  versions  of  the  IOS. 
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At  this  point,  it  looks  like 
about  40%  of  our  routers  and 
switches  are  vulnerable. 

It’s  difficult  to  get  an  exact 
number  because  many  of  the 
routers  and  switches  across 
my  organization  aren’t  man¬ 
aged  by  our  core  network  en¬ 
gineering  team.  Tracking  all  of 
those  devices  and  determining 
the  person  responsible  for 
each  one  would  be  a  time-con¬ 
suming  process,  especially 
when  the  devices  are  in  differ¬ 
ent  countries. 

Mitigation 

Mitigation  for  this  vulnerabili¬ 
ty  requires  two  actions.  The 
networking  team  must  first 
patch  IOS  or  upgrade  it  to  a 
nonvulnerable  version  and 
then  configure  the  access-con¬ 
trol  lists  to  block  the  protocols 
that  the  code  uses  to  attack 
routers.  The  latter  could  be 
accomplished  either  on  the 
device  itself  or  on  the  firewall, 
which  protects  the  device. 

As  I  write  this,  no  IOS 
patches  are  available,  but  I’m 
sure  that  by  the  time  this  col¬ 
umn  sees  print  Cisco  will  have 
released  one.  That’s  good,  be¬ 
cause  upgrading  IOS  on  a  pro¬ 
duction  router  isn’t  a  trivial 
task.  It  normally  requires 
hours  —  sometimes  days  —  of 
lab  testing  before  our  engi¬ 
neers  feel  confident  in  up¬ 
grading. 

While  we’re  preparing  to 
upgrade  or  patch  the  systems, 
we’ve  been  able  to  take  other 
steps  to  protect  ourselves.  For 
example,  we  obtained  enough 
information  about  the  exploit 
to  create  intrusion-detection 
system  rules  to  watch  inbound 
traffic  for  signs  of  attempts  to 
launch  this  particular  denial- 
of-service  attack. 

It  has  been  a  few  days  now, 
and  we  haven’t  seen  any  traf¬ 
fic  indicative  of  this  attack.  So 
far,  so  good.  D 


WHAT  DO  YOU  THINK? 

This  week's  journal  is  written  by  a  real 
security  manager,  “Mathias  Thurman,'' 
whose  name  and  employer  have  been 
disguised  for  obvious  reasons.  Contact  him 
at  mathiasJhurman@yahoo.com,  or  join  the 
discussion  in  our  forum:  QuickLink  a1590 

To  find  a  complete  archive  of  our 
Security  Manager's  Journals,  go  online  to 

O  computerworld.com/secjournal 


SECURITY  LOG 


Security  Bookshelf 

Linux  Security  Cookbook,  by 
Daniel  J.  Barrett,  Richard  E. 
Silverman  and 
Robert  G.  Byrnes; 

O’Reilly  &  Associ¬ 
ates,  June  2003 

The  authors  stress 
upfront  that  the 
Linux  Security 
Cookbook  isn’t  an 
all-in-one  security 
reference  and  that  security  is 
a  never-ending  process.  Then, 
rather  than  pontificating  on 
security  theory,  they  jump 
right  into  the  topics.  From  vari¬ 
ous  file-integrity  techniques, 
to  encryption,  authorization, 
monitoring  and  logs,  the  book 
includes  many  “recipes,”  or 
examples.  These  include  key¬ 
strokes,  shell  code  and  expla¬ 
nations  that  focus  on  different 
aspects  of  Linux  security. 

Each  recipe  contains  the  prob¬ 
lem,  solutions  and  discussion 
for  the  various  topics.  The 
authors  describe  the  tech¬ 
niques  in  detail  and  say  where 
to  get  the  application  or  utility 
used  in  solving  the  problem. 
This  a  great  reference  book  for 
intermediate  mid  seasoned 
systems  administrators. 

-Mathias  Thurman 

St.  Bernard  Updates 
Patch  Software 

San  Diego-based  security 
vendor  St.  Bernard  Software 
Inc.  last  week  upgraded  its 
UpdateExpert  patch  manage¬ 
ment  software  with  new  fea¬ 
tures  that  include  support  for 
Hewlett-Packard  Co.'s  Open- 
View  management  platform, 
disconnected  network  support 
and  custom  reporting  options. 
UpdateExpert  6.1  features  a 
Smart  Plug-in  function  that  al¬ 
lows  the  software  to  be  man¬ 
aged  by  HP  OpenView,  and  the 
custom  reporting  option  will 
allow  companies  to  conduct 
trend  analysis  by  combining 
machine  and  patch  confor¬ 
mance  report  data,  said  the 
company.  The  new  version  of 
UpdateExpert  Is  available  now 
and  starts  at  $1,400  for  a  one- 
year  subscription  to  support 
100  workstations. 


www.computerworld.com 


BRIEFS 


Sun  Microsystems 
Upgrades  Solaris  9 

Sun  Microsystems  Inc.  has  set 
Aug.  13  as  the  date  when  it  will 
release  its  latest  upgrade  of  So¬ 
laris  9,  which  will  include  integra¬ 
tion  of  the  GNOME  2.0  desktop, 
the  open-source  interface  used  in 
Linux.  The  upgrade  will  also  in¬ 
clude  improvements  to  the  So¬ 
laris  Live  Upgrade  feature.  Users 
who  are  part  of  the  Sun  support 
plan  will  get  the  upgrade  free  of 
charge;  others  will  pay  a  fee  that 
will  depend  on  the  size  of  the  ma¬ 
chines  being  upgraded. 


Navy  Deploys 
Network  Watchdog 

The  U.S.  Navy’s  Office  of  Naval 
Intelligence  (ONI)  announced  that 
it’s  deploying  the  nCircle  IP360 
vulnerability  management  system 
from  San  Francisco-based  nCircle 
Network  Security  Inc.  ONI  will 
use  the  product  to  monitor  its 
network  for  vulnerabilities  and 
exposures  in  real  time. 


Data  Management 
App  Gets  Upgrade 

Last  week,  Billerica,  Mass.-based 
data  management  applications 
vendor  Trillium  Software  an¬ 
nounced  Version  7  of  its  Trillium 
Software  System.  New  features 
include  improved  user  accessi¬ 
bility  and  the  ability  to  more 
easily  integrate  third-party  data 
sources.  The  product  is  available 
now;  pricing  starts  at  $119,000. 


App  Helps  Manage 
Staff  Performance 

Development  Dimensions  Inter¬ 
national,  a  Bridgeville,  Pa.-based 
human  resources  consulting  firm, 
and  Burlington,  Mass.-based  per¬ 
formance  management  software 
provider  Performaworks  Inc.  have 
partnered  to  release  MaxWorks, 
an  online  employee  performance 
management  system.  Pricing 
ranges  from  $15  to  $45  per  user, 
depending  on  the  number  of  end 
users  licensed. 
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The  Boiesy  and 
McBride  Show 


Theme  song  (to  the  tune  of  Pinky  and  the 
Brain ,  a  Steven  Spielberg  cartoon  about 
two  genetically  altered  lab  mice  who  rou¬ 
tinely  try  to  take  over  the  world):  They’re 
Boiesy  and  McBride,  yes,  Boiesy  and 
McBride.  One  is  a  lawyer,  the  other’s  brain’s  fried. 
They’re  litigation  mice,  their  briefs  have  been  spliced. 
They’re  noisy,  they’re  Boiesy  and  McBride,  Bride, 

Bride,  Bride,  Bride,  Bride! 

Before  each  night  is  done,  their  lawsuits  will  be  filed. 
By  the  dawning  of  the  sun,  they’ll  sue  your  first-born 


child.  They’re  Boiesy  and 
McBride,  yes,  Boiesy  and 
McBride.  The  threats  they 
have  tried  are  business  sui¬ 
cide.  But  to  prove  their 
mousey  worth,  they’ll  liti¬ 
gate  the  Earth.  They’re 
noisy,  they’re  Boiesy  and 
McBride,  Bride,  Bride, 

Bride,  Bride,  Bride,  Bride, 

Bride,  Narf! 

Boiesy:  Ooh,  what  pretty 
curves  and  lines  on  the 
whiteboard,  McBride!  Is 
that  a  copy  of  a  Pueblo 
Picasso? 

McBride:  That’s  Pablo, 

Boiesy,  and  the  so-called  pretty  curves 
and  lines  before  you  constitute  an 
analysis  of  how  to  succeed  in  busi¬ 
ness.  Here  is  the  equation  of  supply 
and  demand.  And  over  here,  you  have 
cost  of  materials  and  workmanship. 
Then  you  add  the  cost  of  marketing. 
Then,  over  there,  we  would  divide  a 
portion  of  the  estimated  profits  into 
research  and  development. 

Boiesy:  Egad!  Brilliant,  McBride!  Er  — 
no,  no.  There’s  just  one  problem: 

We  don’t  do  any  of  those  things  well, 
do  we? 

McBride:  Exactly,  Boiesy,  that’s  why 


we’re  going  to  take  an  en¬ 
tirely  different  approach  to 
building  our  business:  Sue. 
Boiesy:  Oh,  Sue  is  coming 
to  help  us?  Narf!  I  like 
Sue!  (Sings)  If  you  knew 
Susie  like  I  knew  Susie. . . . 
(McBride  thwacks  Boiesy 
on  the  head  with  a  pencil.) 
McBride:  No,  I  mean  sue  as 
in  take  everyone  we  can 
find  to  court. 

Boiesy  (blushing):  Well, 
McBride,  I  generally  don’t 
like  to  court  more  than  one 
girl  at  a  time,  and  right  now, 
Sue  is  the  only  one  for  me. 
McBride:  No,  I  mean  we  get  a  lawyer, 
as  in  you,  and  then  you  exploit  the 
justice  system  to  reach  one  of  two 
goals:  Either  we  extort  as  much  mon¬ 
ey  as  possible  out  of  the  competition, 
or  we  generate  enough  fear  that 
someone  purchases  our  company 
for  a  huge  sum  of  money  just  to 
shut  us  up. 

Boiesy:  Oh,  brilliant,  McBride!  Eh,  no, 
no  —  what  are  we  going  to  claim  the 
other  companies  did  wrong? 

McBride:  That  is  precisely  the  ques¬ 
tion,  Boiesy.  (McBride  thinks  for  a 
moment,  then  glances  down  at  a  copy 


of  Windows  XP  and  breaks  into  a  sly 
grin.)  Boiesy,  are  you  pondering  what 
I’m  pondering? 

Boiesy:  Um,  I  think  so,  McBride,  but 
isn’t  the  AMD  Duron  a  durable  form 
of  nylon? 

McBride:  I  don’t  know,  Boiesy,  but  I  do 
know  you  are  one  pin  short  of  a  Z80 
processor.  Anyway,  what  does  Micro¬ 
soft  do  best? 

Boiesy:  Create  software  with  security 
vulnerabilities? 

McBride:  Besides  that,  Boiesy.  They 
take  credit  for  the  work  of  others. 
They  put  features  from  other  compa¬ 
nies’  software  into  their  products,  call 
it  “Microsoft  innovation”  and  then 
charge  people  for  it. 

Boiesy:  I  see,  McBride!  So  we’re  going 
to  steal  features,  put  them  into  SCO 
Unix  and  charge  people  more  for  it! 
Egad,  that’s  astounding!  Er,  no,  no  — 
nobody  seems  to  be  interested  in  buy¬ 
ing  SCO  Unix,  McBride,  so  how  do  we 
charge  them  anything? 

McBride:  That’s  where  you  come  in, 
Boiesy.  We  claim  that  all  the  good  fea¬ 
tures  of  Linux  came  from  SCO  Unix, 
and  then  we  threaten  to  sue  everyone 
for  using  our  intellectual  property. 
Boiesy:  But  it  isn’t  actually  our  intel¬ 
lectual  property,  is  it? 

McBride:  By  the  time  anyone  finds  out, 
it  won’t  matter,  Boiesy.  We’ll  have 
inflated  our  stock  price,  damaged 
the  competition  and  gotten  more 
press  coverage  than  J.  Lo  and  Ben. 
Come  Boiesy,  we  must  prepare  for 
tomorrow  night. 

Boiesy:  Why,  McBride?  What  are  we 
going  to  do  tomorrow  night? 

McBride:  The  same  thing  we’re  going 
to  do  every  night  from  now  on,  Boiesy 
—  try  to  sue  everyone  on  earth!  > 


WANT  OUR  OPINION? 

OFor  more  columns  and  links  to  our  archives,  go  to 

www.computerworld.com/opinions 


PHYSICIANS  TAKE  THE 

HIPPOCRATIC  OATH- 

JUDGES  TAKE  A 
CONSTITUTIONAL  OATH 


WHAT  ABOUT 
SOFTWARE  MAKERS? 


As  the  world’s  leading  provider  of  business  application  software,  we 
have  an  enormous  responsibility  to  you,  our  customers.  After  all,  you’ve 
entrusted  your  business’s  future  to  our  products  —  and  our  reputation. 
So  we’d  like  to  take  a  few  moments  to  define  our  commitment  to  you. 
It’s  not  exactly  an  oath.  But  for  us,  it’s  written  in  stone. 

SOFTWARE  THAT  WORKS 

We  don't  rush  SAP®  solutions  into  the  marketplace.  They’re  engi¬ 
neered  for  stability  and  reliability,  then  tested  and  retested  to  ensure  it. 
Which  makes  them  the  perfect  choice  for  mission-critical  business 
processes.  Altogether,  we  spend  more  than  $1  billion  a  year  on  research 
and  development.  Think  of  it  as  an  investment  in  your  peace  of  mind. 

OPTIONS  THAT  PROTECT  YOUR  INVESTMENT 

We’re  constantly  looking  for  new  ways  to  help  you  reduce  costs  and 
limit  your  financial  risk. 

Here’s  one  way:  our  breakthrough  open  technology  platform,  SAP 
NetWeaver"!  It  enables  you  to  make  use  of  your  existing  software  invest¬ 
ments,  plus  choose  any  software  you  want  in  the  future  —  SAP  or  non- 
SAP.  The  result:  significantly  lower  integration  costs,  as  well  as  lower  total 
cost  of  ownership. 

SOLUTIONS  THAT  FIT  YOUR  BUSINESS 

What  does  a  small  pharmaceutical  manufacturer  have  in  common 
with  a  huge  financial  services  company?  Frankly,  not  a  lot.  Which  is 
why  we  offer  customized  solutions  for  23  different  industries,  as  well  as 
solutions  scaled  specifically  for  small  and  midsize  businesses.  After  all,  you 
want  solutions  that  fit,  not  almost  fit. 


SERVICE  THAT’S  SECOND  TO  NONE 

Even  the  best  software  is  useless  without  top-notch  support.  So  we’ll 
always  stand  behind  you.  In  fact,  130,000  consultants  will  be  behind  you. 
It’s  called  the  SAP  Customer  Services  Network. 

They  can  help  you  strategically  plan  for,  implement,  operate,  and 
continually  improve  solutions.  Their  goal  is  to  maximize  your  return  on 
investment  and  help  you  realize  your  objectives  faster  than  ever. 

A  PROMISE  THAT  WE  LL  BE  HERE 

We’ve  been  in  business  for  over  31  years.  Today,  29,000  of  our  em¬ 
ployees  are  servicing  19,600  customers  in  120  countries.  As  you  can 
probably  deduce  from  those  numbers,  we’re  committed  to  being  your 
trusted  partner  for  the  long  term.  Evidently,  that  commitment  has  not 
gone  unnoticed.  As  BusinessWeek  Online  recently  commented:  “In  a  world 
where  being  safe  is  sexy,  SAP  may  be  the  biggest  eye-catcher  on  the  block.” 

FEEL  LIKE  TALKING? 

Lately,  there’s  been  a  lot  of  turmoil  in  our  industry.  Hopefully,  you 
haven’t  been  affected. 

But  if  you  are,  you  should  know  that  you  have  an  alternative:  a 
company  whose  main  priority  is  its  customers’  needs;  a  company  that 
places  the  utmost  importance  on  relationships;  a  company  that  will  be 
here  for  you. 

If  you’d  like  to  talk  to  that  company,  call  us  at  1  800  940  1727  or  visit 
sap.com/commitment 

THE  BEST-RUN  BUSINESSES  RUN  SAP 
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QUOTE  OF  THE  WEEK 


MP-communities]  provide  a  rich 
testbed _ We’re  helping  mem¬ 

bers  of  the  community  unleash  their  own 
creativity  around  what  technology  can  do. 


-  Debra  Dunn,  senior  vice  president  for 
corporate  affairs,  Hewlett-Packard  Co. 


Q&A 

Add  One  CIO  and  Mix  Well 

Tyco  picks  Dana  Deasy  (left)  as  the  first 
corporatewide  CIO  on  its  new  executive 
team.  His  mission:  To  integrate  systems 
at  disparate  business  units.  Page  38 


OPINION 

Terminator  4:  How  to  Fire  Suppliers 

Careful  and  regular  pruning  of  your  IT  ven¬ 
dors  will  reduce  costs  and  complexity,  says 
columnist  Bart  Perkins.  He  provides  guide¬ 
lines  for  doing  it  right.  Page  41 


Corporate  America 
is  still  in  denial  about 
the  threat  of  cyber¬ 
terrorist  attacks 
against  critical  facil¬ 
ities  in  the  energy 
telecommunications 
and  financial  indus¬ 
tries.  By  Dan  Verton 


EDITOR’S  NOTE:  Dan  Verton’s  book  gets 
its  title  from  an  emergency  planning 
exercise  for  the  2002  Winter  Olympics 
in  Utah,  code-named  Black  Ice.  In  the 
simulation,  a  major  ice  storm  combines  with  the  dis¬ 
ruption  of  utility  computer  systems  to  produce  regional 
blackouts,  Internet  outages,  cell  phone  overload  and 
telephone  failures.  It  demonstrated  the  devastating 
effect  of  physical  and  electronic  attacks  on  the  power 
grid  and  everything  that  depends  on  power,  including 
computer  systems.  An  earlier  exercise,  run  by  the 
National  Security  Agency  (NSA)  and  code-named 
Eligible  Receiver,  was  equally  chilling: 

Prior  to  launching  their  attacks  on  June  9, 1997,  of¬ 
ficials  briefed  the  team  of  35  NSA  computer  hackers 
on  the  ground  rules.  They  were  told  in  no  uncertain 
terms  that  they  were  allowed  to  use  only  software 
tools  and  other  hacking  utilities  that  could  be  down¬ 
loaded  freely  from  the  Internet  through  any  one  of 
the  hundreds  and  possibly  thousands  of  hacker  Web 
sites.  In  other  words,  the  Pentagon’s  own  arsenal  of 


BOOK 

EXCERPT 


secret  offensive  information  warfare  tools,  which  the 
NSA  certainly  had,  could  not  be  used.  And  while 
they  were  allowed  to  penetrate  various  Pentagon 
networks,  the  Red  Team  was  prohibited  from  break¬ 
ing  any  U.S.  laws.  The  primary  target  was  the  U.S. 
Pacific  Command  in  Hawaii,  which  is  responsible  for 
all  military  contingencies  and  operations  conducted 
in  the  Pacific  theater,  including  the  tension-wracked 
Korean  peninsula. 

Posing  as  hackers  hired  by  the  North  Korean  intel¬ 
ligence  service,  the  NSA  Red  Team  dispersed  around 
the  country  and  began  digging  their  way  into  mili¬ 
tary  networks.  They  floated  through  cyberspace  with 
ease,  mapping  networks  and  logging  passwords 
gained  through  brute-force  cracking  and  the  more 
subtle  tactic  of  social  engineering  —  sometimes  it 
was  just  easier  to  call  somebody  on  the  telephone, 
pretend  to  be  a  technician  or  high-ranking  official, 
and  ask  for  his  password.  The  team  gained  unfettered 
access  to  dozens  of  critical  Pentagon  computer  sys¬ 
tems.  With  that  level  of  access,  they  were  free  to  cre¬ 
ate  legitimate  user  accounts  for  other  hackers,  delete 
accounts  belonging  to  authorized  officials,  reformat 
the  server  hard  drives  and  scramble  the  data,  or  sim¬ 
ply  shut  the  systems  down.  They  were  able  to  break 
through  the  paltry  network  defenses  with  ease,  after 
which  they  could  conduct  denial-of-service  attacks, 
read  or  make  minor  changes  to  sensitive  e-mail  mes¬ 
sages,  and  disrupt  telephone  services.  And  they  did 
so  without  being  traced  or  identified. 

The  results  of  the  exercise  stunned  all  who  were 
involved.  The  NSA  Red  Team,  using  hacking  tools 
that  were  available  to  anybody  on  the  Internet,  could 
have  crippled  the  U.S.  military’s  command  and  con¬ 
trol  system  for  the  entire  Pacific  theater  of  opera¬ 
tions.  From  a  military  perspective,  that  alone  was  a 
nightmare.  But  it  soon  became  clear  that  the  exercise 
had  revealed  much  broader  vulnerabilities. 

During  the  course  of  analyzing  what  the  Red  Team 
had  accomplished,  NSA  officials  discovered  that 
much  of  the  private-sector  infrastructure  in  the  U.S., 
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such  as  the  telecommunications  and  electric  power 
grids,  could  easily  be  sent  into  a  tailspin  using  the 
same  tools  and  techniques.  More  importantly,  one 
former  high-ranking  NSA  official  indicated  that  the 
exercise  revealed  it  would  be  possible  to  cause 
“strategic  damage  to  the  U.S.  money  supply.” 

Utilities 

During  any  given  year,  the  average  large  utility  com¬ 
pany  experiences  about  1  million  cyber-intrusions 
that  require  investigation  to  ensure  that  critical  sys¬ 
tem  components  have  not  been  compromised.  In 
addition,  data  collected  by  Alexandria,  Va.-based 
Riptech  Inc.  on  cyber-attacks  during  the  six  months 
following  the  Sept.  11  terrorist  attacks  showed  that 
companies  in  the  energy  industry  suffer  intrusions  at 
twice  the  rate  of  other  industries.  And  many  of  those 
attacks  appear  to  be  sponsored  by  governments  or 
organizations  in  the  Middle  East.  Power  and  energy 
companies  averaged  12.5  severe  or  critical  attacks  re¬ 
quiring  immediate  intervention  per  company.  That 
rate  was  more  than  twice  the  average  rate  of  attacks 
for  all  300  companies  surveyed. 

The  energy  industry  and  many  other  industrial 
sectors  of  the  economy  have  opened  their  enterpris¬ 
es  to  a  vast  array  of  cyber-disruptions  by  creating  in¬ 
advertent  Internet  links  (both  physical  and  wireless) 
between  their  corporate  networks  and  the  digital 
crown  jewels  of  most  industrial  processes  —  Super¬ 
visory  Control  and  Data  Acquisition  (SCADA)  sys- 


Key  Themes  in 
Black  Ice 

■  For  the  first  time  in  our  nation’s  history,  the  govern¬ 
ment  alone  can’t  defend  its  citizens.  With  more  than  85% 
of  the  nation’s  most  critical  computer  networks  and  infrastruc¬ 
ture  in  the  hands  of  private  companies,  the  front  line  of  the  war 
against  cyber-terrorism  runs  through  corporate  America. 

■  We  shouldn’t  view  terrorism  solely  through  an  histori¬ 
cal  lens.  Terrorists  learn  from  past  attacks  and  will  try  new 
tactics,  such  as  disrupting  computer  networks  to  harm  the  U.S. 
economy. 

■  Physical  security  and  IT  security  are  inextricably 
linked.  The  bombing  of  a  telecom  switching  center,  data 
center  or  power  plant  can  produce  the  same  denial  of  service 
that  a  computer  virus  or  worm  does. 

■  The  9/11  attack  in  New  York  was  “the  worst  cyber¬ 
terrorist  attack  in  history,”  because  it  disrupted  the  nation’s 
most  critical  communications  hub. 

■  Al-Qaeda,  which  now  uses  IT  and 
the  Internet  for  communications 
and  collecting  intelligence,  is  likely 
to  evolve  to  using  IT  for  cyber-terrorism. 

Cyber-terrorism  directly  supports  al- 
Qaeda’s  strategic  objectives. 

■  Many  U.S.  Web  sites  give  terror¬ 
ists  detailed  information  about 
possible  targets,  including  floor  plans, 
backup  sites,  wired  and  wireless  net¬ 
works,  oil  pipelines,  ventilation  systems 
and  more. 


terns.  These  are  the  systems,  including  real-time  pro¬ 
grammable  logic  controllers,  that  manage  the  actual 
flow  of  electricity  and  natural  gas  and  perform  other 
critical  functions  in  various  industrial  control  set¬ 
tings,  such  as  chemical  processing  plants,  water  pu¬ 
rification  and  delivery  systems,  wastewater  manage¬ 
ment  facilities  and  a  host  of  manufacturing  firms. 
Control,  disruption  or  alteration  of  critical  com¬ 
mands,  instructions  and  monitoring  functions  per¬ 
formed  by  these  systems  can  be  an  issue  of  regional 
and  possibly  national  security  [QuickLink  39133]. 

Deregulation  and  the  increased  focus  on  the  bot¬ 
tom  line  have  forced  utilities  and  other  companies  to 
move  more  and  more  operations  to  the  Internet  as  a 
means  of  improving  efficiency  and  reducing  costs.  In 
addition,  there  has  been  a  simultaneous  increase  in 
the  number  of  remote  dial-in  connections  estab¬ 
lished  between  mobile  and  home  systems  belonging 
to  technicians  and  the  actual  SCADA  systems. 

Telecommunications 

Prolonged  power  failures  have  many  casualties,  the 
first  of  which  is  often  the  telecommunications  infra¬ 
structure,  including  the  Internet.  But  the  telecommu¬ 
nications  industry  faces  its  own  security  challenges 
that,  like  those  of  the  energy  industry,  are  the  prod¬ 
uct  of  market  forces. 

The  industry  has  assisted  adversaries  by  making  it 
easier  for  the  infrastructure  to  be  targeted  and  dis¬ 
rupted.  “The  vulnerability  of  the  [Internet  and  com¬ 
munications]  infrastructure  to  physical  attack  has  in¬ 
creased  as  service  providers  have  concentrated  their 
operations  in  fewer  facilities,”  stated  the  report  of 
the  President’s  Commission  on  Critical  Infrastruc¬ 
ture  Protection  in  1997. 

This  remains  a  serious  problem  today,  as  many 
large  data  centers  have  been  erected  throughout  the 
country  that  provide  single  points  of  failure,  particu¬ 
larly  from  a  physical  attack  perspective.  Should  those 
facilities  be  destroyed  or  severely  damaged,  hun¬ 
dreds  and  potentially  thousands  of  companies  that 
chose  to  outsource  IT  infrastructure  or  business 
processes  could  be  left  without  mission-critical  data 
and  connectivity. 

At  the  same  time,  there’s  been  an  enormous  up¬ 
swing  in  consolidation  throughout  the  telecommuni¬ 
cations  industry,  the  result  of  deregulation  and  the 
unbundling  of  local  networks.  This  has  spawned  mil¬ 
lions  of  new  connection  points  into  the  infrastruc¬ 
ture  that  adversaries,  malicious  hackers  and  terror¬ 
ists  can  use  to  exploit  well-known  vulnerabilities. 

The  susceptibility  of  telecommunications  switch¬ 
ing  equipment  to  software-based  disruption  became 
clear  during  the  1990  collapse  of  AT&T’s 
long-distance  service.  A  few  lines  of  incorrect 
code  caused  a  cascading  failure  of  114  elec¬ 
tronic  switching  systems.  And  while  that 
failure  was  the  result  of  an  internal  system 
glitch,  the  Commission  on  Critical  Infra¬ 
structure  Protection  concluded  that  the 
same  type  of  failure  “could  alternatively 
have  been  triggered  maliciously  by  relatively 
small  individual  actions.”  It  went  on  to  state 
that  newer  generations  of  switching  equip- 
ent  are  likewise  “potentially  vulnerable 
o  remote  access,  alteration,  or  control  by 
skilled  attackers.” 


DEFINITION 

Cyber-Terrori  m 

The  execution  of  a  surprise  attack  by  a  subnational 
foreign  terrorist  group,  or  individuals  with  a  domes¬ 
tic  political  agenda,  using  com  her  technology  and 
the  Internet  to  cripple  or  disable  a  nation's  electron¬ 
ic  and  physical  infrastructures.  The  goal  is  to  r  t 
only  hurt  the  economy  of  a  region  or  country,  but 
also  to  amplify  the  effects  of  a  traditional  physical 
terrorist  attack  by  causing  additional  confusion  and 
panic.  It  can  also  take  the  form  of  a  physical  attack  - 
withe  t  ever  touching  a  computer  keyboard  -  that 
destroys  critical  Internet,  communications  and 
electric  power  nod:  3. 

-Da  Vet  <n 


Financial  Services 

Trillions  of  dollars  change  hands  every  day  in  the 
U.S.,  thanks  to  electronic  transaction  and  payment 
systems  running  on  computer  networks  that  rely  on 
uninterrupted  sources  of  electric  power.  But  deregu¬ 
lation  in  both  the  energy  and  telecommunications  in¬ 
dustries  has  helped  create  multiple  points  of  poten¬ 
tial  failure  in  the  support  networks  that  serve  the  fi¬ 
nancial  community  —  support  networks  that  were 
once  operated  end-to-end  by  single  providers.  There¬ 
fore,  regional  failures  or  disruptions  of  the  energy 
and  telecommunications  systems  that  power  the  cy¬ 
ber-infrastructure  of  the  financial  community  would 
have  an  immediate  impact  on  banks,  financial  ser¬ 
vices  companies,  payment  systems,  investment  com¬ 
panies,  and  securities  and  commodities  exchanges. 

Unfortunately,  conducting  strategic  attacks  has 
been  made  easier  by  the  increase  in  mergers  and  ac¬ 
quisitions  in  the  financial  sector,  which  often  result  in 
centralization  of  operations  centers.  And  while  key  or¬ 
ganizations,  such  as  the  New  York  Stock  Exchange, 
have  undertaken  efforts  to  increase  diversity  in  sup¬ 
port  infrastructure,  the  attacks  of  Sept.  11, 2001,  proved 
that  massive  physical  attacks  that  disable  critical  pow¬ 
er  and  telecommunications  infrastructure  can  stop  the 
nation’s  financial  dealings  dead  in  their  tracks. 

Drunk  With  Denial 

Despite  these  lessons,  many  in  corporate  America  re¬ 
main  unconvinced.  Two  months  after  the  attacks,  the 
wounds  still  wet  and  raw,  a  survey  of  459  CIOs  at  ma¬ 
jor  companies  found  that  just  53%  of  firms  had  busi¬ 
ness-continuity  plans,  and  less  than  half  had  IT  secu¬ 
rity  awareness  and  training  for  employees.  The  pri¬ 
vate  sector  remains  drunk  with  denial. 

But  if  the  private  sector  has  been  operating  under 
the  influence,  its  bartender  has  been  the  federal  gov¬ 
ernment  and  its  policy  of  allowing  market  forces  to 
determine  the  level  of  investment  in  security.  Former 
Virginia  Gov.  James  S.  Gilmore  III  (R)  says  the  Bush 
administration’s  policy  of  relying  “on  private-sector 
willingness  to  take  certain  security  measures  and 
bear  the  costs”  has  had  little  impact  to  date  on  the 
state  of  security  readiness  in  the  private  sector.  I 


Reprinted  with  permission  from  Black  Ice:  The  Invisi¬ 
ble  Threat  of  Cyber-Terrorism,  by  Dan  Verton  (Mc¬ 
Graw-Hill,  2003).  Verton  is  a  Computerworld  reporter. 
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CATERING 
TO 


Customer  loyalty  software 
helps  companies  figure  out 
how  to  keep  their  clients  for 
the  long  term  By  Mark  Leon 


CUSTOMER  SATISFACTION  is  good,  but 
customer  loyalty  is  even  better. 

“A  satisfied  customer  is  one  who  sees 
you  as  meeting  expectations,”  says  John 
Samuels,  a  senior  manager  in  the  mar¬ 
keting  department  at  CDW  Corp.,  a  Vernon  Hills,  111.- 
based  direct  marketer  of  more  than  50,000  hardware 
and  software  products,  with  net  sales  of  $4.3  billion. 
“A  loyal  customer,  on  the  other  hand,  wants  to  do 
business  with  you  again  and  will  recommend  you  to 
others.” 

CRM  packages  may  help  measure  satisfaction,  but 
not  all  of  them  can  be  used  to  benchmark  loyalty,  and 
the  link  is  tenuous.  A  good  loyalty  program,  accord¬ 
ing  to  Bob  Chatham,  an  analyst  at  Forrester  Research 
Inc.  in  Cambridge,  Mass.,  combines  customer  feed¬ 
back  and  business  information  with  sophisticated 
analytics  to  produce  actionable  results.  This  is  why 
IT  has  to  take  the  lead  in  loyalty. 

“IT  is  just  about  the  only  department  that  can  co¬ 
ordinate  between  business  processes,  external  data- 
analytic  vendors  and  the  executives  who  can  trans¬ 
late  output  into  action,”  says  Chatham. 

Five  years  ago,  CDW  started  working  with  Walker 
Information  Inc.,  a  64-year-old  market  research  firm 


e-blue 
usbmers 

in  Indianapolis  that  focuses  on  customer  loyalty,  to 
gather  customer  experience  data.  “Initially,  these 
were  phone  surveys”  with  cycle  times  of  two  months 
that  were  used  to  generate  reports,  says  Samuels. 

As  a  beta  customer,  CDW  in  April  2002  replaced 
the  phone  surveys  with  Walker’s  SmartLoyalty  ser¬ 
vice,  which  includes  an  e-mail  solicitation  that  directs 
willing  customers  to  a  Web  site  that  Walker  co-hosts 
with  CDW.  It  dramatically  reduced  survey  cycle  times, 
and  some  reports  are  even  generated  in  real  time. 

“It’s  not  that  difficult  to  do  Web  surveys,”  says 
Harry  Watkins,  a  research  director  at  Aberdeen 
Group  Inc.  in  Boston.  “Walker’s  real  value  is  that 
they  have  built  validated,  multivariate 
measures  of  loyalty  into  their  software. 

As  an  ASP,  Walker  also  acts  as  a  consul¬ 
tant,  helping  companies  determine  the 
causal  variables  that  determine  loyalty.” 

SmartLoyalty  divides  customers  into 
four  “buckets,”  or  categories,  commonly 
used  for  analyzing  customer  loyalty. 

CDW  compared  a  customer’s  purchasing 
behavior  with  his  bucket  and  then  in  fur¬ 
ther  testing  saw  that  all  the  buckets  lined 
up  very  well  with  customers’  behavior. 

“In  other  words,”  says  Samuels,  “we 
proved  that  the  software-generated 
model  was  very  predictive.” 

In  response,  executives  sought  sales 
improvements.  For  example,  the  model 
told  them  that  customers  wanted  more 
out  of  the  Web  site  and  from  account  managers.  So 
CDW’s  CEO  directed  the  CIO  to  develop  a  response 
plan,  which  led  to  a  new  search  engine  and  a  Web 
site  that  delivers  more  product  information. 

“And  now  our  account  managers  are  trained  to 
provide  more  than  just  ‘speeds  and  feeds,’  ”  says 
Samuels.  “For  example,  they  are  trained  in  areas  such 
as  security  and  disaster  recovery.”  These  changes  are 
paying  off,  he  says,  adding,  “Each  year  that  we  have 
used  SmartLoyalty,  we  have  seen  the  percentage  of 
truly  loyal  customers  increase.” 

Hitting  Jackpots 

At  Harrah’s  Entertainment  Inc.  in  Las  Vegas,  CIO 
Tim  Stanley  says  focusing  on  loyalty  has  helped  push 
the  casino  chain’s  numbers  in  the  right  direction.  In 
1997,  Harrah’s  launched  a  loyalty  program  that  pulled 
all  customer  data  into  a  centralized  warehouse  and 
provided  sophisticated  analytics.  “We  wanted  to  bet¬ 
ter  understand  the  value  of  the  investments  we  make 
in  our  customers,”  says  Stanley. 

But  this  analysis  came  at  a  price.  “Back  then,  we 


of  companies  world¬ 
wide  are  making 
an  effort  to  create 
.  But 

in  today’s  demand- 
driven  markets,  those 
companies  have  a  big 
advantage  over  the 
many  businesses  that 
are  still  looking  only  at 
customer  satisfaction. 


used  Informix  running  on  NCR  for  both  our  opera¬ 
tional  and  analytic  systems,”  he  explains.  “When  we 
converted  to  the  centralized  warehouse,  the  analytic 
system  was  a  real  dog,  far  too  slow.” 

So  in  1999,  Stanley  offloaded  the  analytics  to  Tera- 
data,  the  NCR  Corp.  database  designed  for  large  data 
sets  and  parallel  architectures.  “And  the  performance 
improvement  was  stunning,”  he  says.  Harrah’s  now 
does  near-real-time  analysis:  As  customers  interact 
with  slot  machines,  check  into  casinos  or  buy  meals, 
they  receive  reward  offers  based  on  the  predictive 
analyses. 

The  data  revealed  other  trends  as  well.  For  exam¬ 
ple,  Stanley  says  Harrah’s  previously  focused  mostly 
on  high  rollers.  But  as  executives  further  studied  the 
analyses  and  reports,  they  realized  that  the  person 
who  visits  a  casino  once  or  twice  a  week  and  spends 
modestly  is  a  great  investment.  “This  was  a  big  ‘Aha!’ 
for  us,”  Stanley  says.  The  result  was  a  new  rewards 
program  tailored  to  low  rollers. 

Paying  Dividends 

“We  have  seen  consistent  growth  in  revenue  and  prof¬ 
its  every  quarter  since  1999,  when  we  implemented 
the  new  loyalty  program,”  says  Stanley.  “By  cross-cor¬ 
relating  questionnaire  analysis  with  our  revenue  num¬ 
bers,  we  estimate  a  steady  60%  ROI  year  after  year 
on  our  investment  in  customer  loyalty.” 

Online  gift  vendor  1-800-flowers.com 
Inc.  chose  software  from  SAS  Institute 
0  Inc.  for  its  customer  loyalty  system 

®  JMff  because  of  the  price.  “Analytical  tools 
like  SAS  Enterprise  Miner  cost  about 
$150,000  —  a  lot  cheaper  that  the  $2  mil¬ 
lion  you  might  spend  on  a  Siebel  cam¬ 
paign  management  system,”  says  Aaron 
Cano,  director  of  customer  knowledge 
at  1-800-flowers.com  in  Westbury,  N.Y. 
After  only  a  few  months,  he  has  already 
seen  more  orders  in  key  segments.  Cano 
uses  the  analyses  to  profile  the  behavior 
of  customers  who  come  back  five  or  six 
times  a  year  and  identifies  others  with 
similar  profiles  for  targeted  marketing. 
“In  order  to  do  this  right,  you  need  to 
use  proven  methods  in  statistical,  experimental  de¬ 
sign,”  says  Radek  Zapert,  senior  manager  for  the  fi¬ 
nancial  services  unit  at  BearingPoint  Inc.  in  McLean, 
Va.  But  new  tools  are  making  that  easier  to  do. 

“Five  years  ago,  I  would  have  said  you  needed  a 
Ph.D.  in  statistics  to  really  leverage  a  tool  like  SAS 
Enterprise  Miner,  but  that  is  no  longer  the  case,”  says 
Cano.  “Now  all  you  need  is  a  good  understanding  of 
the  business  and  an  analytical  mind-set.”  And  tech¬ 
nology  plays  a  critical  role  in  turning  that  into  action. 

When  CDW  began  using  SmartLoyalty,  Samuels 
already  had  a  rich  source  of  market  research  reports. 
“The  problem  was  that  all  this  information  was  on 
thousands  of  sheets  of  paper,  and  there  was  no  way 
to  get  it  quickly  to  the  right  decision-makers,”  he 
explains. 

That’s  where  IT  closes  the  loop.  Aberdeen’s 
Watkins  puts  it  this  way:  “With  good  customer  loyal¬ 
ty  technology,  IT  can  wire  the  voice  of  the  customer 
back  into  the  enterprise.”  ► 

Leon  is  a  freelance  writer  in  San  Francisco. 
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Tyco  International  Ltd. 
has  added  its  first  corpo¬ 
ratewide  CIO  position  to 
bolster  the  $36  billion 
conglomerate’s  brand-new  executive 
team.  It’s  part  of  a  housecleaning  fol¬ 
lowing  last  year’s  fraud  and  accounting 
scandals  under  former  CEO  Dennis 
Kozlowski.  To  fill  the  new  CIO  position, 
Tyco  has  chosen  a  man  who  has  had 
success  with  integrating  IT  at  global 
business  segments.  DANA  S.  DEASY  previ¬ 
ously  spent  nearly  four  years  at  Siemens 
AG,  where  he  was  CIO  of  the  Americas, 
led  about  20  business  unit  CIOs  and  had 
an  IT  budget  of  $600  million. 

Deasy  spoke  with  Computerworld’s 
Jean  Consilvio  about  how  he  hopes 
to  use  his  global  expertise  to  help 
Tyco  find  common  ground  among  its 
five  disparate  businesses,  some  of 
which  were  added  during  a  recent  ac¬ 
quisition  binge. 

What  are  the  benefits  of  being  Tyco’s  first 
executive-level  CIO?  One  of  the  advan¬ 
tages  of  being  the  first  at  anything  you 
do  is  that  you  have  a  chance  to  create 
it,  as  opposed  to  inheriting  and  then 
figuring  out  how  to  change  it.  [Add  to] 
that  working  with  an  executive  team 
that’s  basically  new,  with  everybody 
out  creating  their  organization,  and 
you  definitely  have  some  natural  syn¬ 
ergies  and  camaraderie  that  I  believe 
will  develop  a  lot  quicker. 

And  one  of  the  exciting  things  I  see 
in  coming  to  Tyco  is  that  I’m  working 
with  an  executive  team  that  is  ex¬ 
tremely  bright,  very  enthused,  thor¬ 
oughly  oriented  throughout  the  mis¬ 
sion  at  hand  about  what  has  to  be  done 
in  bringing  the  various  Tyco  units 
together. 


What  three  key  points  did  you  learn  at 
Siemens,  and  how  can  you  apply  them  to 
your  new  role  at  Tyco?  Clearly  the  first 
one  is  to  acknowledge  and  respect  that 
the  [business  unit]  CIOs  are  actually 
the  experts  in  the  business  they  work 
in  and  draw  upon  that  expertise. 

No.  2  is,  at  the  end  of  the  day,  all  the 
CIOs  out  there  really  do  want  to  coop¬ 
erate  as  long  as  you  can  acknowledge 
that  they  have  a  line  of  business  they 
work  for,  they  have  a  boss  they  need  to 
work  for,  and  what  you  need  to  do  is 
find  that  common  ground  that  they  all 
want  to  work  on.  And  the  third  one 
would  be ...  go  after  the  low-hanging 
fruit  first.  Go  after  the  things  that  help 
build  the  credibility,  not  only  of  your 
own  office,  but  [also]  the  credibility  of 


Hit’s  not  too  often 
you  get  a  chance 
to  come  into  a  company 
who’s  redefining  itself 
with  a  brand-new  set  of 
corporate  officers.  It’s  just 
an  exciting  opportunity. 


DANA  S.  DEASY,  SENIOR  VICE  PRESIDENT 
AND  CIO,  TYCO  INTERNATIONAL  LTD. 


the  community  of  CIOs  you’re  working 
with,  and  get  some  early  momentum 
going.  There  will  be  so  much  more  dif¬ 
ficult  things  that  have  to  be  accom¬ 
plished,  and  you  definitely  want  to  get 
some  quick  wins. 

How  will  you  measure  savings  in  networks, 
data  centers  and  applications?  Do  you  know 
what  you’re  stepping  into  there?  Yeah,  I 
think  I  do,  because  prior  to  coming  on 
board  at  Tyco,  I  was  at  Siemens,  I  was 
at  General  Motors.  In  both  of  those  en¬ 
vironments,  I  was  stepping  into  worlds 
where  there  was  not  a  lot  of  good  un¬ 
derstanding  of  the  budget  and  how 
much  was  being  spent.  So  I  do  have  an 
appreciation  that  [on]  Day  1,  is  there 
going  to  be  an  understanding  of  the  IT 
landscape  and  how  much  we  spend? 
No.  That  is  going  to  have  to  be  ana¬ 
lyzed,  baselined.  And  then  you  draw 
upon  what  I  mentioned  earlier  as  your 
quick  wins. 

What  lies  ahead  for  you  in  integrating  the 
supply  chain  across  business  segments? 

Tyco’s  involved  in  a  lot  of  different 
products,  services,  systems,  solutions. 
Each  of  those  have  supply  chain  needs, 
and  each  of  those  need  to  be  reviewed 
in  terms  of  how  integrated  is  the  sup¬ 
ply  chain  within  the  business  segment. 
Do  you  want  to  start  looking  at  cross¬ 
business  segment  integration?  Without 
a  doubt.  The  first  opportunity  is  to 
understand  how  well  Tyco  has  done 
supply  chain  integration  within  the 
businesses. 

What’s  the  biggest  challenge  in  integrating 
data  for  business  users  at  Tyco?  You  have 
to  find  [out]  what  is  it  that  everybody 
needs  and  nobody  has  but  everybody 


DANA  S.  DEASY 

Age:  44 

New  job:  Ser  or  vice 
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CIO  for  the  become  ive 
Group  at  General  Motors 
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wants.  And  then  you  have  to  be  realis¬ 
tic  to  determine  where  does  that  infor¬ 
mation  reside  and  does  it  reside  today 
in  common  systems.  Do  we  have  the 
opportunity  to  create  executive  infor¬ 
mation  systems,  and  what  will  be  in¬ 
volved  in  doing  that?  At  most  compa¬ 
nies  today  in  corporate  America  —  this 
is  not  just  a  Tyco  issue  —  the  CIOs  are 
being  hard-pressed  to  get  their  arms 
around  financial  controls  and  the  data 
that  drives  those,  and  I  expect  it  will 
be  no  different  here  at  Tyco. 

Do  you  see  IT  helping  Tyco  win  back  credibil¬ 
ity  among  its  shareholders?  There’s  proba¬ 
bly  a  lot  of  areas,  everything  from  be¬ 
ing  able  to  ensure  that  we  have  strong 
financial  control  to  supporting  the 
needs  of  internal  control  and  audit. 
[We’ve  got]  to  demonstrate  that  Tyco 
can  really  bring  its  various  business 
units  together  and  find  common  ground 
for  not  only  standardization  of  process¬ 
es,  but  good  old-fashioned  cost  savings. 

How  do  you  choose  the  right  technology  sup¬ 
plier?  The  phone’s  already  ringing  off 
the  hook.  Every  supplier,  vendor,  all 
the  big  boys  want  to  get  in  and  talk. 
There  is  no  doubt  that  there  is  going  to 
be  an  aggressive  push  to  look  at  oppor¬ 
tunities  to  do  better  vendor  manage¬ 
ment  in  the  IT  space.  I  can  tell  you 
there’s  going  to  be  a  good  old-fash¬ 
ioned  way  you  do  that:  an  investigation 
of  need  within  the  company,  what 
has  to  be  accomplished,  who  are  the 
players  that  can  do  that,  and  then 
let  them  propose  how  best  they  can 
accomplish  that.  I 


Add  One  CIO 

And  Mix  Well 

After  the  big  scandal,  Tyco  picks  an 
experienced  CIO  to  join  its  new  executive  team  and 
integrate  systems  of  disparate  business  units. 
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Hewlett-Packard  employees  gain  international  business  savvy 
while  bringing  IT  to  communities  in  developing  countries. 


In  the  August  issue  of 
Harvard  Business  Review, 

DEBRA  DUNN  and  Keith  Ya- 
mashita  discuss  a  series  of 
initiatives  —  called  i- com¬ 
munities  —  in  economically 
deprived  areas  such  as  the 
town  ofKuppam  in  the  state 
of  Andhra  Pradesh,  India. 

Sponsored  by  Hewlett- 
Packard  Co.,  i-communities 
use  public/private  partner¬ 
ships  to  boost  economic 
development  through  tech¬ 
nology  while  building  markets,  testing 
products  and  honing  the  global  savvy  of 
HP  leaders.  Dunn,  senior  vice  president 
for  corporate  affairs  at  HP,  told  Kath¬ 
leen  Melymuka  how  HP  has  learned  to 
do  well  while  doing  good. 

What’s  an  i-community?  Essentially,  an 
i-community  is  a  collaborative  engage¬ 
ment  with  government  and  nonprofit 
or  community-based  organizations  in  a 
specific  area  to  figure  out  how  infor¬ 
mation  and  communications  technolo¬ 
gy  can  best  accelerate  economic  devel¬ 
opment  in  ways  sustainable  for  the 
community  and  HP. 

There’s  clearly  a  philanthropic  component  on 
HP’s  part,  but  you  say  it’s  also  tied  to  busi¬ 
ness  strategy.  How?  In  a  couple  of  criti¬ 
cal  ways.  When  we  think  long  term 
about  where  opportunities  for  growth 
are  in  our  business,  accessing  develop¬ 
ing  markets  is  very  high  on  the  list  of 
opportunities.  Today  our  products  are 
probably  sold  to  the  top  billion  people 
in  world,  but  the  top  [economic]  tier  is 
getting  smaller  as  a  percent  of  the  to¬ 
tal.  So  figure  out  where  growth  will 


come  from.  It’s  critical  to  de¬ 
velop  products  [for]  people 
low  on  the  economic  pyra¬ 
mid.  These  [i-communities] 
provide  a  rich  testbed:  deep 
engagement  with  real  cus¬ 
tomer  needs  in  a  different 
segment  of  the  economic 
strata.  And  governments  in 
emerging  markets  are  apply¬ 
ing  technology  as  a  way  to 
deliver  services  because 
that’s  fundamental  to  their 
success  long  term.  This  is 
getting  us  closer  to  that  segment. 

Give  me  an  example  of  how  the  project  has 
affected  the  community.  One  of  the  big 

services  we  focus  on  is  agriculture. 
[Kuppam]  is  a  pretty  remote  place  and 
not  a  lot  of  resources  are  available  to 
help  improve  productivity.  If  I’m  a 
farmer,  I  now  have  access  to  an  agri¬ 
cultural  advisory  group  via  e-mail 


through  the  community  information 
centers  and  can  use  them  to  diagnose 
all  kinds  of  problems.  I  can  tap  into  the 
village  photographer  —  another  thing 
we’ve  set  up  —  and  send  in  digital  pho¬ 
tos  of  problems  with  crops  and  get 
quick  turnaround  advice. 

What  impact  do  you  foresee  over  the  next 
two  years  of  the  three-year  project?  There 
will  be  more  community  information 
centers.  More  citizens  will  have  direct 
access,  target  schools  will  be  more 
wired,  more  teachers  will  be  trained. 
But  some  of  most  exciting  things  will 
come  from  the  community.  That’s  the 
power  of  these  projects.  They  get  to 
play  with  things  we  take  for  granted 
and  figure  out  ways  to  use  them  that 
are  relevant  to  them,  while  tapping  the 
technical  expertise  from  HR 

Can  you  give  me  an  example?  In  another 
project  in  India,  an  entrepreneur  run- 


Kuppam,  India:  One  Year  Later 

A  year  into  the  HP  project,  Kuppam’s  i-community  includes  the  following: 

■  Five  community  information  centers,  each  with  five  to  10  computers,  staffed  by  local 
entrepreneurs  who  offer  a  suite  of  Internet-enabled  services  and  help  local  people  access 
them  for  a  small  fee.  The  entrepreneurs  tap  into  government  loan  programs  for  initial  funding 

and  receive  technical  assistance  from  HP  and  other  partners. 

“  ~ 1 . .  " 


■  Computers  and  Internet  access  at  targeted  local  schools. 


i  A  government  portal,  developed  largely  by  HP,  that  gives  residents  information  and 
access  to  government  services  in  areas  such  as  health,  literacy  and  agriculture. 


BUI 


i  A  mobile,  wireless  service  center  that  takes  the  i-community’s  technology  services 
on  the  road  to  those  who  can’t  manage  io  get  into  Kuppam.  It’s  currently  operated  by  HP 
employees  but  eventually  will  be  taken  over  by  a  local  entrepreneur. 


ning  an  information  center  discovered 
he  could  use  a  projector  and  turn  a 
computer  into  a  cinema.  He’s  charging 
a  few  rupees  for  a  service  that’s  highly 
valuable  in  the  community.  So  we’re 
helping  members  of  the  community 
unleash  their  own  creativity  around 
what  technology  can  do. 

Why  the  three-year  deadline?  It’s  impor¬ 
tant  to  create  some  urgency  and  incen¬ 
tive  around  milestones  and  around  or¬ 
ganizations  getting  resources  quickly 
so  you  get  traction.  We  have  a  lot  of 
people  on  the  ground  there.  The  goal 
is  to  get  the  project  to  a  level  where  it’s 
sustainable  without  deep  involvement 
by  HP. 

What  does  HP  actually  get  out  of  this  other 
than  potential  long-term  markets?  HP  also 
gets  some  short-term  things.  Employee 
motivation:  Our  employees  want  to  be 
part  of  a  company  that  focuses  on 
something  bigger  than  making  a  profit. 
We  get  a  lot  of  insight  into  what  it’s  go¬ 
ing  to  take  to  compete  in  this  segment 
of  the  market.  We’re  very  much  a  part 
of  the  dialogue  in  India  about  trying  to 
provide  affordable  technology  to  rural 
communities,  and  that  provides  helpful 
intelligence  for  our  mainstream  busi¬ 
ness.  And  for  the  people  who  actually 
work  on  these  projects,  the  develop¬ 
ment  is  unbelievable.  This  stuff  is  real¬ 
ly  hard.  You  learn  so  much  in  terms  of 
perspective  and  being  careful  about  as¬ 
sumptions  and  about  the  dynamics  in 
developing  markets.  It’s  phenomenal. 

Many  of  our  readers  are  technologists  in 
nontechnology  companies.  Are  there  oppor¬ 
tunities  for  nontechnology  companies  to  get 
involved  in  these  types  of  initiatives?  I  think 
there  are.  This  market  is  very  much  a 
services-based,  shared-use  market. 

The  services  that  will  be  delivered  will 
be  in  the  health  area,  entertainment, 
information  —  all  kinds  of  things. 
That’s  the  next  ring  of  the  circle:  the 
content-based  solutions  that  would 
feed  these  types  of  projects. 

Our  goal  is  to  deliver  something  in 
the  short  term,  but  we  want  to  stimu¬ 
late  the  economy,  and  that  fuels  the 
broader  market  for  all  kinds  of  organi¬ 
zations.  There  are  opportunities  for 
many  different  kinds  of  companies  to 
be  involved.  I 


Melymuka  is  a  Computerworld 
contributing  writer.  You  can  contact  her 
at  kmelymuka@yahoo.com. 


This  is  the  latest  in  a  series  of  monthly  discus¬ 
sions  with  Harvard  Business  Review  authors 
on  topics  of  interest  to  IT  managers. 
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Dell  PowerEdge”  6650  4P  Server  and  Sun  Fire  V480  4P  Server 


Dell  |  Enterprise 

Last  year,  Dell  sold  more  Linux  servers  in  the  U.S.  than  any  other  server  vendor!  And  here's 
one  reason  why.  In  a  recent  Dell  test,  a  Dell/Oracle®  9//Linux  solution  running  an  Intel®  Xeon™ 
processor-based  Dell  PowerEdge™  6650  4P  server  was  89%  faster  and  56%  less  expensive  than  a 
Sun  Fire  V480  4P  server  running  an  Oracle  9//Sun  Solaris  solution.2  To  see  complete  test  results,  go 
to  www.dell.com/migration17. 

There's  little,  if  any,  debate:  Migrating  from  UNIX  to  a  standards-based  solution  lowers  cost  and 
increases  flexibility.  Dell  gives  you  both  mind-bending  performance  and  unparalleled  expertise,  all 
at  a  great  value.  And  the  entire  solution  is  backed  by  enterprise  level  24/7  service  and  support. 

The  migration  is  on.  Find  out  how  you  can  make  the  most  of  it  for  your  organization.  Call 
1-866-535-0388  or  go  to  the  Dell  UNIX  Migration  online  calculator 
f  at  www.dell.com/migration17  to  see  how  a  Dell  solution  can  lower 
your  migration  costs  and  help  simplify  the  transition. 


Leading  enterprise  solutions.  Easy  as 


D0LL 


Click  www.dell.com/migration17  Call  1-866-535-0388 

^  toll  free 

'Based  on  IDC  Quarterly  Server  Tracker.  June  2003.  -Tests  by  Dell  in  January  2003  on  baseball  database.  Dell  configuration.  Dell  PowerEdge  6650  server  with  four  2.0  GHz  Xeon  MP  processors.  Red  Hat  Linux  Advanced  Server  2.1.  3  Year  Gold  Support.  Price  $19,681  (www.dell.com.  7/1/03).  Sun 
configuration:  Sun  Fire  V480  server  with  four  900  MHz  UltraSPARC  III  processors.  Solaris  9  (12/02  version)  3  Year  Gold  Support.  Price:  $44,646  (www.sun.com,  7/1/03).  For  details  and  results,  see:  www.dell.com/migration. 

Intel,  the  Intel  logo  and  Intel  Xeon  are  trademarks  or  registered  trademarks  of  Intel  Corporation  or  its  subsidiaries  in  the  United  States  and  other  countries.  Dell,  the  Dell  logo  and  PowerEdge  are  registered  trademarks  of  the  Dell  Computer  Corporation.  ©2003  Dell  Computer  Corporation.  All  rights  reserved. 
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BART  PERKINS 


Terminator  4: 
How  to  Fire  Suppliers 


OST  ORGANIZATIONS  recognize 
the  importance  of  having  a  rigorous 
supplier  selection  process  and  focus 
a  lot  of  attention  on  supplier  acqui¬ 
sitions.  However,  many  underesti¬ 


mate  the  importance  of 
having  a  supplier  termi¬ 
nation  process.  Since  the 
IT  supplier  portfolio  must 
match  a  dynamic  business 
strategy  and  ever-chang¬ 
ing  IT  architecture,  an 
untrimmed  portfolio  will 
continue  to  expand.  It’s 
essential  that  your  suppli¬ 
er  portfolio  be  reviewed 
and  pruned  regularly  to 
remove  suppliers  or  prod¬ 
ucts  that  are  no  longer 
needed.  Careful  pruning 
will  reduce  costs  and  in¬ 
frastructure  complexity. 

But  in  most  organiza¬ 
tions,  getting  rid  of  an  IT 
product,  service  or  vendor  is  an  un¬ 
usual  event,  and  there’s  no  clear  proc¬ 
ess  to  follow.  One  client  with  a  rigor¬ 
ous  selection  process  described  his 
company’s  approach  to  supplier  man¬ 
agement  this  way:  “We  greet  our  sup¬ 
pliers  at  the  door  with  a  two-by-four 
to  the  head.  Afterwards,  those  who 
are  still  standing  are  invited  in  and 
never  asked  to  leave.”  He’s  not  alone. 
My  company’s  studies  show  that  the 
average  supplier  portfolio  is  at  least 
50%  larger  than  our  clients  estimate. 
In  other  words,  most  companies 
don’t  know  just  how  many  vendors 
they  really  use!  An  audit  of  one 
client’s  portfolio  revealed  3,000  sup¬ 
pliers,  after  the  client  estimated  300. 

When  your  supplier  portfolio 
mushrooms  out  of  control,  it  often 
indicates  that  you’ve  also  lost  control 
of  your  procurement  process  and 
your  architecture.  And  supplier 


management  costs  sky¬ 
rocket.  A  well-trimmed 
portfolio  can  be  managed 
for  less  than  5%  of  total 
external  spending,  but 
the  cost  of  managing  an 
overly  large  portfolio  can 
amount  to  20%  of  total 
external  spending.  Sup¬ 
port  costs  will  also  be 
higher  than  necessary. 

Review  your  supplier 
portfolio,  searching  for 
suppliers  who  are  under- 
performing  or  whose 
products  no  longer  meet 
your  architectural  specifi¬ 
cations.  Target  unneces¬ 
sary  products,  even  if  you 
can’t  eliminate  the  supplier  entirely. 
Then  take  steps  to  terminate  them, 
using  these  guidelines: 

1.  Check  contracts  to  make  sure 
there  are  no  penalties,  givebacks  or 
other  repercussions  for  termination. 

2.  Create  a  migration  plan.  If  you 
have  a  portfolio  baseline,  it  will  iden¬ 
tify  all  the  systems,  projects  and  peo¬ 
ple  who  rely  on  the  product  or  ser¬ 
vice  being  jettisoned.  Determine 
how  those  affected  will  be  support¬ 
ed,  before  termination  begins. 

3.  Use  your  vendor  management 
group  to  manage  the  termination 
process.  A  good  vendor  management 
group  will  assure  that  the  process  is 
consistent  and  fair  for  all  parties. 

4.  Explain  the  decision  and  the  ra¬ 
tionale  to  the  supplier  directly.  No 
one  deserves  to  learn  of  his  own  dis¬ 
missal  around  the  water  cooler  or, 
worse,  from  an  industry  publication. 


BART  PERKINS 

is  managing  partner  at 
Leverage  Partners  tael 
1  in  Louisville,  Ky .  which 
helps  CIOs  manage  their 
if  suppliers.  He  was  CiO 
ai  Tricon  Global  Restau¬ 
rants  Inc.  and  Dcie  Food 
Co.  Contact  him  at 
BartPerkists® 
leveragePartnars.com. 


5.  Assess  the  cultural  impact.  Indi¬ 
viduals  can  be  fiercely  loyal  to  a  par¬ 
ticular  technology  that  they  helped 
create  or  feel  is  unique.  Provide  spe¬ 
cial  hand-holding  to  ease  the  pain 
and  draw  dissenters  into  the  fold. 

6.  Make  terminations  visible.  Pub¬ 
licize  the  new  IT  architectural  stan¬ 
dard  in  the  department  newsletter, 
on  the  corporate  intranet  or  through 
other  channels.  Everyone  needs  to 
know  about  the  termination  before 
the  next  architectural  decision  or  the 
next  salesperson’s  call. 

7.  Pay  attention  to  termination  de¬ 
tails.  Protect  yourself  from  security 
breaches  by  remembering  to  change 
passwords  and  take  access  cards 
from  vendor  personnel.  If  you’re 
dropping  all  of  a  supplier’s  products, 
remove  the  supplier  from  the  ac¬ 
counts  payable  system. 

8.  Be  creative  if  obstacles  arise. 
One  client  faced  enormous  pushback 
from  its  applications  group,  which 
had  opposed  a  decision  to  migrate  to 
new  hardware.  After  more  than  a 
year  of  requests  for  cooperation,  the 
vice  president  of  operations  took  a 
new  approach:  He  announced  that 
the  old  hardware  had  been  sold  and 
would  be  loaded  onto  a  truck  on  a 
specified  date.  The  applications 
group  finally  rose  to  the  occasion, 
scrambled  to  convert  everything  to 
the  new  hardware  and  succeeded 
with  three  days  to  spare. 

Every  superfluous  part  of  your 
supplier  portfolio  increases  costs, 
complicates  your  procurement  proc¬ 
ess  and  adds  unnecessary  complexi¬ 
ty  to  your  infrastructure.  Leverage 
your  supplier  management  efforts  by 
reviewing  your  portfolio  regularly 
and  terminating  any  extraneous  sup¬ 
pliers  and  products,  ► 


WANT  OUR  OPINION? 

OFor  more  columns  and  links  to  our  archives,  go  to 

www.computerworld.com/opinions 


Visit  www.dell.com/migration17  and  go  to  the 
Dell  UNIX  Migration  online  calculator  for  a  free 
migration  assessment.  Dell  offers  a  host  of 
end-to-end  migration  services,  including  those 
for  Oracle®  9/.  Call  1-866-535-0388  today  to 
speak  with  a  Dell  representative.  Together,  you 
can  assess  your  individual  needs  and  then 
develop  a  cost-effective  plan  for  UNIX  migration. 


Easy  as 


DOLL 


Call  1-866-535-0388 

toll  free 

Click  www.dell.com/migration17 
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MARKETPLACE 


www.computerworld.com 


Every  product  carrying  this  mark  has 
been  tested  and  certified  for  use  with 
lnfraStruXurem  architecture.  Before 
you  buy,  check  for  the  X  to  guarantee 
product  compatibility. 


APC 


Legendary  Reliability® 

AX2A3EP-US 


introducing  APC's  Rack-mount  LCD  Monitor 

As  floor  space  in  your  IT  environment  becomes  more  expensive  and  difficult  to  allocate,  you  need 
to  utilize  your  rack  enclosure  space  as  efficiently  as  possible. 

A  traditional  CRT  monitor,  monitor  shelf,  keyboard,  and  keyboard  drawer  take  up  to  13U  of  your 
valuable  rack  space.  An  APC  rack-mount  LCD  monitor/keyboard  drawer  offers  you  the  same 
functionality  while  using  only  1U  (1.75")  -leaving  you  with  up  to  12U  of  valuable  space. 


FEATUBfcmCLUflfc 


A  full  size  keyboard  with  1 04  full 
travel  keys  and  integrated 
number  pad 


On-screen  display 
(OSD)  adjustments 


An  integrated  trackball  to  eliminate  the 
need  for  an  external  mouse 


uvci  uimmuii 

satisfied  customers,  APC’s 
Legendary  Reliability’' 
guarantees  peace  of  mind. 


1024x768  resolution  for 
exceptional  image  quality  for 
most  server  applications 


Active  matrix  TFT  displays  that  emit 
less  heat  and  use  less  than  half  the 
power  of  comparable  CRT  monitors 


Ability  to  connect  to  a  server  or  KVM 
switch  via  a  standard  VGA  connector 


Enter  to  WIN  a  FREE  APC  LCD  Monitor  today.  A  $2239  value! 

Visit  httpJ/promtupcxom  Key  Code  m703y  •  Call  888-289-APCC  x6606  •  Fax  401-788-2797 

©2003  American  Power  Conversion  Corporation.  All  Trademarks  are  the  property  of  their  owners.  E-mail:  esupport@apcc.com  •  1 32  Fairgrounds  Road,  West  Kingston,  Rl  02892  USA 


SENSAPHONE  ’ 

irvis-aaaa 


Sends  Monitors 

SNMP  64 


Messages  IP 


Embedded 

Web 


Sends 

E-Mail 


Power 

Outage 


Internal 

UPS 


Microphone 

for  Sound 
Monitoring 


8  RJ-45  Sensor  Inputs 

( Temperature ,  Humidity, 
Water,  Motion,  Power, 
Smoke/Fire) 


Power 

Control 

Interface 


Ethernet 

Port 


Internal  voice. 
Modem 
&  Pager  Port 


BE  NOTIFIED  BEFORE  CRITICAL  EVENTS  TURN  INTO  DISASTER! 


The  Sensaphone  IMS-4000  Infrastructure 
Monitoring  System  monitors  critical 
environmental  and  network  elements  in  your 
server  room,  data  center,  or  telecomm 
installation  and  reports  to  you  instantly 
when  events  threaten  your  infrastructure. 

The  IMS-4000  keeps  watch  so  you  don't 
have  to. 

See  these  features  and  more  on  the  web 
at —  www.sensaphone.com/ims-4000.html 


Eight  environment  inputs 
Power  sensing 
Monitors  64  IP  addresses 
Send  alerts  to  64  people 
8  methods  of  contact 
Calendar  scheduling 
Expands  to  256  sensors 
Remote  power  control 
Optional  camera 


Tel:  610.558.2700 

Phonetics,  Inc. 

Fax:  610.558.0222 
www.sensaphone.com 

877-373-2700 

901  Tryens  Road 
Aston,  PA  19014 

Reach  Respected  IT  Leaders  in 

COMPUTERWORLD 

Marketplace  Advertising  Se 

The  Computerworld  Marketplace  advertising  sectio 
reaches  more  than  1.8  million  IT  decision  makers  evi 
week.  Marketplace  advertising  helps  Computerwor 
readers  compare  prices,  search  for  the  best  values, 
locate  new  suppliers  and  find  new  products  and  s 
for  their  IT  needs. 


To  advertise,  call  212-655-5111 
or  email  pri  it@ven.com 


Advertising  Supplement 

IT  Careers:  BDPA  Focuses  on  Career  Growth,  Entrepreneurs 


When  more  than  2,500  individuals  meet  for  the 
annual  Black  Data  Processing  Association 
Conference  in  Philadelphia  Aug.  13-17,  they'll  get  a  rich 
blend  of  three  critical  career  components  —  technical 
expertise,  mentoring  and  coaching  of  individuals,  and  skills 
to  lead  start-up  and  established  businesses. 

The  conference  reflects  BDPA's  overall  mission  to  open 
the  doors  of  technology  for  African-Americans,  from 
offering  programs  to  expose  families  to  technology  to 
offering  the  latest  in  IT  skills  courses.  The  more  than  40 
chapters  found  throughout  the  United  States  offer 
programs  ranging  from  the  Homework  911  e-Learning 
hotline  to  Black  Family  Technology  Awareness  Week. 

According  to  Milt  Haynes,  BDPA  president  and  a 
feature  release  development  manager  at  Lucent 
Technologies,  that's  why  the  conference  agenda  is  far- 
reaching.  Sessions  range  from  the  latest  in  wireless 
technologies  and  the  role  of  IT  in  major  current  events  to 
performance  comparisons  of  .NET,  XML  and  Oracle.  "Our 
conference  theme  is  Classroom  to  Boardroom,  focusing  on 
the  fact  that  education  is  a  life-long  effort,"  Haynes  says. 
"We  have  to  start  at  the  elementary  school  level  to  attract, 
mentor,  coach  and  educate  individuals  for  IT  careers." 

In  addition  to  the  highly  technical  sessions,  the 
conference  is  offering  workshops  on  a  culture-specific 
approach  to  e-learning,  the  challenges  for  African 
American  women  in  the  IT  workforce  and  how  faith-based 
programs  can  assist  in  bridging  the  IT  divide.  Executive 
Pathways  includes  sessions  designed  to  help  IT 


professionals  navigate  their  careers.  As  part  of  the 
conference,  BDPA  will  also  hold  its  annual  career  fair,  this 
year  featuring  30  major  employers.  Conference  attendees 
will  be  able  to  take  advantage  of  on-site  career  coaching 
on  everything  from  resume  writing  to  interviewing  skills. 


□ 


:o 


'formation  Technology  Thought  Leader* 


Haynes  is  watching  over  the  conference  as  the 
outgoing  president  of  BDPA.  His  goals  have  been  simple  - 
to  build  an  infrastructure,  to  capture  data  on  existing  IT 
expertise  among  African  Americans  to  pair  up  with  hiring 
demand,  to  assist  chapters  in  bringing  the  Classroom  to 
Boardroom  program  to  their  communities  and  in  growing 
the  BDPA's  entrepreneurial  program. 

"The  biggest  obstacle  IT  professionals  face  is  in 
keeping  current  with  the  job  market,"  Haynes,  who  also 
served  on  the  Blue  Ribbon  Diversity  Panel  for  ITAA,  says. 
"We  need  to  stay  one  step  ahead  of  the  learning."  While 
outsourcing  is  a  constant  concern  for  IT  professionals, 
Haynes  believes  the  best  and  most  challenging  work  is 
remaining  in-house  where  IT  professionals  can  work  the 
customer-face  aspect  much  better  than  any  outsource 
provider.  "Companies  who  are  looking  to  the  future  want 
to  keep  development  inside  to  maintain  a  strong 
workforce,"  he  says. 


For  more  information  about  IT  Careers  advertising, 
please  contact: 

Nancy  Percival 

Vice  President,  Recruitment  Advertising 

800.762.2977 

500  Old  Connecticut  Path 

Framingham,  MA  01701 

Produced  by  Carole  R.  Hedden 


Software  Engineer  III:  Work  with 
engineers  and  chemists  to  ana¬ 
lyze  business  needs,  design, 
implement,  test,  modify  and 
release  client/server  web  appli¬ 
cations  to  synthesize  and  opti¬ 
mize  small  molecules  that  have 
the  potential  to  enter  clinical 
development  and  become  medi¬ 
cines.  Provide  technical  support 
for  chemists.  Design  and  devel¬ 
op  repository  gateway  for  part¬ 
ners.  Skills  include:  Java/J2EE, 
Python,  Oracle,  SQL,  XML, 
HTML,  Perl,  Shell,  JavaScript, 
C/C++,  Windows,  Linux,  UNIX, 
SGI,  chemical  informatics  toolk¬ 
its  and  other  development 
tools/platforms.  Requirements 
include  a  Master’s  degree  or 
equivalent  in  Computer  Science, 
an  Engineering  discipline  or 
closely  related  field.  No  work 
experience  required.  Applicants 
must  have  unrestricted  autho¬ 
rization  to  work  in  the  United 
States.  Salary  $66, 000/year. 
40  hours/wk.  Respond  with  two 
copies  of  resume  to  Case 
#200202756,  Labor  Exchange 
Office,  19  Staniford  St.,  1st  FI., 
Boston,  MA  02114. 


BellSouth,  a  leader  in  providing 
local  and  cellular  telephone, 
paging  and  mobile  data  services 
has  multiple  openings  for  the 
position  of  Systems  Admin¬ 
istrator  in  its  Atlanta,  Georgia 
office:  Position  requires  relevant 
bachelor's  degree  or  foreign 
degree  equivalent  and  relevant 
experience. 

For  consideration,  please  for¬ 
ward  your  resume  to:  Ms.  Lisa 
Burlingame,  BellSouth,  2247 
Northlake  Parkway,  Suite  800, 
Tucker,  Georgia  30084.  Please 
do  not  email  or  fax  resumes. 
EOE 


ASSOCIATE  IS  ANALYST 
Resp.  for  the  dvlpmnt  &  deploy¬ 
ment  of  SAP  sys.  for  the  co. 
Specific  duties  include:  (i)  gath¬ 
ering,  dsgng,  configuring,  script¬ 
ing,  integrating  &  testing  comp, 
scripts,  interfaces  &  programs 
for  a  multi-landscape  environ¬ 
ment;  (ii)  documenting  related 
interfaces;  (iii)  assisting  Staff 
Consultants/SAP  Sys.  Analysts 
in  evaluating  user  reqmnts  for 
new  or  modified  programs;  (iv) 
utilizing  all  components  of  SAP 
dvlpmnt  environment  to  combine 
pre-dvlpd  software  objects 
w/customized  programming  &  to 
generate  applns  that  are  highly 
integrated  w/the  SAP  R/3  sys.;  & 
(v)  providing  tech,  support  to 
users  of  SAP  programs.  MS  in 
Comp.  Sci.,  Mgmt  Info.  Sys.  or 
Bus.  Must  have  working  knowl¬ 
edge  of  UNIX,  Perl,  Cold  Fusion 
sys.  dvlpmnt  life  cycle  as  well  as 
comp,  hardware  &  operating 
sys.  High  mobility  preferred.  40 
hrs/wk,  OT  as  reqd,  8  am  -  5  pm, 
$64,240/yr.  Qualified  applicants 
please  submit  resume  to: 
Manager,  Beaver  County  Team 
PA  Career  Link,  2103  Ninth 
Avenue,  Beaver  Falls,  PA 
15010-3957.  Please  refer  to 
Job  Order  No.  WEB  346310. 


Computer  Support  Spec.: 
Marietta,  GA.  Provide  tech¬ 
nical  support;  maintain 
commercial  credit  card 
information  system;  coordi¬ 
nate  conversion  to  new 
hardware  and  software. 
Req'd:  BS  (or  foreign 
equiv.)  in  Elec.  Engin., 
Comp.  Science  or  rel.  field 
&  2  yrs  exp.  in  job  offered  or 
as  Programmer/Analyst. 
Resumes  to:  Fast  Trip 
Corp.,  640  Whitlock  Av„ 
Marietta,  GA  30064. 


OUR  PEOPLE  MAKE  THE 

Difference  whl+makt 


Stores,  Inc. 


We’re  Looking  for  the  Future  Leaders  of  Tomorrow 


Wal-Mart  Stores,  Inc.  has  been  recognized  by 
Fortune  Magazine  as  one  of  the  most  admired  compa¬ 
nies  in  the  world.  As  our  company  continues  to 
expand,  so  does  the  opportunity  for  first-class,  talent¬ 
ed  people  to  guide  the  future  of  one  of  the  most  suc¬ 
cessful  and 

innovative  growth  companies  in  the  world. 

Put  your  career  on  a  fast  climb  and  help  us  continue  to 
set  the  industry  standard  in  information  technology. 

•  UNIX  -  C,  C++,  Administration,  Engineering, 
Informix  DBAs 

•  NT  Workstation  -  VB.VC++,  Java,  ASP,  XML 

•  IBM  Mainframe  -  COBOL,  CICS,  DB2  and 
IMS  DBAs 

•  Networking  -  Ethernet,  VSAT,  Frame 
Relay,  ATM 

•  Telecommunications 


Ready  to  do  it  all?  Candidates  interested  in  joining 
our  team  should  forward  a  resume  to: 

Wal-Mart  Information  Systems  Division 

Attn:  Recruiting  Department 

805  Moberly  Lane  M41 

Bentonville,  AR  72716-0560 

Fax:  (479)  277-4227 

E-mail:  ISDADS@wal-mart.com 

For  more  information,  call  toll-free: 
1-888-JOBS-ISD  or  visit  our 
Web  site  at: 

www.walmartstores.com 


\ 


WaWflart  Is  An  Equal  Opportunity  Employer.  M/F/D/V 
‘2000  Wal-Mart  Stores,  Inc. 
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Explore  JCPenney 

...where  IT  s  all  inside  &  exciting  IT  careers  await! 


JCPenney  is  an  international  retailer 
with  an  expanding  web  presence 
in  addition  to  our  traditional 

catalog  and  stores.  -gj 


Information  Technology  Opportunities 

From  our  sophisticated  on-line 
order  entry,  point-of-sale,  and 
merchandise  replenishment  systems, 
to  one  of  the  largest  private 
telecommunications  networks 
anywhere,  it's  a  world  of  change 
when  it  comes  to  technology. 

Information  Technology  will  play 
an  even  more  pivotal  role  in  the 
JCPenney  of  the  future. 

Dedicated  applications  specialists 
are  a  key  element  in  our  plans 
for  continued  success  and 
market  leadership. 


One  of  our  strategies  is 
ensuring  that  JCPenney  stays 

A  Great  Place  to  Work’! 


it’s  all  inside: 


BEST  ft® 

nviairr: 


■information 
technology 


Apply  through  http://icpenney.ri 


stores  (catalog  l-cotit 

1/ candidates  J  Equal  Opportunity  Employer 


JAVA  DVLPR. 

Anlyze.  &  dvlp.  existing  or  pro¬ 
posed  sftwre.  applications.  Dvlp. 
Java-based,  srvr.  side  compo¬ 
nents  to  meet  client  specified 
user  reqs.  Dvlp.,  implement,  & 
improve  prgms.,  applications,  & 
related  procedures  to  proces 
data  using  in-depth  knwldge.  of 
sftwre.  dvlpmnt.  life  cycle. 
Encode,  test,  debug  &  install 
operating  prgms.  &  other  appli¬ 
cation  sftwre.  utilizing  knwldge. 
of  Java  prgmng.  tools. 
Bachelor's  (or  equiv.).  in  Comp. 
Sci.,  Math,  Engrg.,  Bus.  or 
Commerce  plus  2  years  experi¬ 
ence  in  offered  position  or  as 
Sftwre.  Engr.,  Prgmmr.  Analyst, 
or  Systms.  Analyst  required. 
Exprnce.  must  include  knowl¬ 
edge  of  Java,  EJB  and  Swing 
prgmmng.  languages;  Oracle  or 
DB2  dtbses.;  Websphere, 
Weblogic,  or  Apache  applica¬ 
tions;  and  operating  systms.  (at 
least  one  from  List  A  and  one 
from  List  B);  List  A  includes  Sun 
Unix,  HP  UNIX  &  AIX.  List  B 
includes  Windows  NT  or 
Windows  2000.  40  hrs/wk,  8  am 
-  5  pm.  $64,240/yr.  Qualified 
applicants  report/submit  resume 
to  Mon  Valley  Regional 
CareerLink,  ATTN:  Actg.  CL 
Program  Supervisor,  Donora 
Industrial  Park,  570  Galiffa 
Drive,  Donora,  PA  15033.  Refer 
to  Job  Order  Number 
WEB346288. 


Medical  Database 
Systems  Manager 

Manages,  administers,  main¬ 
tains,  and  configures  a  Unix/ 
Linux/Windows/Mac  LAN  based 
client/server  system  including 
use  of  NIS  and  NFS  to  perform 
disk  and  file  sharing  with  Samba 
system.  Integrates  multiple 
online/offline  medical  and  genet¬ 
ic  research  databases  and 
insures  that  such  databases  are 
capable  of  biology  driven  data 
mining.  Requires  a  Bachelor's 
degree  in  Computer  Science 
and  one  year  direct  experience. 
Send  resume,  no  calls,  to: 

Medical  College  of  Wisconsin 
Attn;  Employment  Office- 
JMC0811 

8701  Watertown  Plank  Rd. 
Milwaukee,  Wl  53226 
Fax:  414-456-6502 


Consultant,  Financial  Business 
Systems  to  analyze  complex 
IBM  MVS  mainframe  based 
revolving  credit  card  portfolio 
Vision  21  and  Vision  Plus  soft¬ 
ware  business  systems  and 
subsystems  to  direct  team  mem¬ 
bers  in  the  design,  development, 
implementation,  and  modifica¬ 
tion  of  software  business  sys¬ 
tems  to  insure  that  systems 
enhancements  such  as  late  pay¬ 
ment  fee,  skip  payment,  credit 
line  underwriting,  overlimit  fees, 
and  authorization  match-off  are 
properly  integrated  into  the 
appropriate  Vision  based  CMS 
posting  system.  Establishes 
parameters  for  daily  batch 
cycles,  supervises  team  mem¬ 
bers  in  coding  for  Vision  Plus 
integration  with  VSAM  data¬ 
base.  and  performs  systems 
functionality  analysis,  unit  test¬ 
ing  and  technical  design  of  sys¬ 
tem  including  customization  of 
system  to  meet  various  end 
users  business  analysis  require¬ 
ments.  Requires  Bachelor's 
Degree  in  Computer  Science, 
Math,  or  any  Engineering  Field 
and  three  years  direct  experi¬ 
ence.  Work  Location:  636  Grand 
Regency  Blvd,  Brandon,  Florida. 
Send  resumes  only,  no  calls,  to: 
Kathi  Nogle,  Household,  2700 
Sanders  Rd.,  Prospect  Heights, 
IL  60070. 


BellSouth,  a  leader  in  providing 
local  and  cellular  telephone, 
paging  and  mobile  data  services 
has  multiple  openings  for  the  fol¬ 
lowing  positions  in  its  Atlanta, 
Georgia  office: 

Senior  Software  Developer 
Software  Engineer 
Channel  Analyst 

All  positions  require  a  relevant 
bachelor's  or  master's  degree  or 
foreign  degree  equivalent  and 
relevant  experience  including 
experience  with  Homebase  soft¬ 
ware. 

For  consideration,  please  for¬ 
ward  your  resume  to:  Ms.  Lisa 
Burlingame,  BellSouth,  2247 
Northlake  Parkway,  Suite  800, 
Tucker,  Georgia  30084.  Please 
do  not  email  or  fax  resumes. 
EOE 


Principal  Software  Cons¬ 
ultant/Developer  to  provide 
strategic  &  tactical  definition 
and  direction  to  Co's  Fund 
Analysis  &  Research  Group. 
Will  support  recurring  &  ad 
hoc  requests  for  data  and 
analysis;  will  manage  devel¬ 
opment  stage  of  project  lifecy¬ 
cles  to  include  creating  writ¬ 
ten  system  requirements, 
applications  development, 
coordinating  QA  testing  & 
implementing  resulting  sys¬ 
tems  solutions  in  a  highly 
matrixed  work  environment. 
Will  enhance  unit's  Sybase 
database  tables  &  Perl  load¬ 
ers  to  support  loading  &  dis¬ 
seminating  data  using 
Morgan  Stanley  Capital 
Intemational/Standard&Poor 
(MSCI/SP)  sector  schemes; 
perform  analysis,  design  & 
implement  the  data  model  for 
Marketing  Event  Planner;  cre¬ 
ate  &  modify  Sybase  stored 
procedures;  migrate  Sybase 
SP  and  Perl  loaders  into  new 
Sybase  environment;  and 
also  redesign  and  improve 
data  warehouse  ETL 
(Extraction  &  Transformation 
Layer)  process  written  in 
PERL  and  run  over  UNIX 
Solaris  Platform.  Requires 
Bach  or  equivalent  in 
Computer  Science,  Engin¬ 
eering,  Math,  or  Physics  and 
5  years  in  job  offered  OR  5 
yrs  exper  in  client/server 
development,  OR  Master’s  or 
equiv  in  C.Sc.,  Eng,  Math,  or 
Physics  and  3  years  in  job 
offered  OR  3  yrs  in  client/ 
server  development.  Candi¬ 
date  must  also  possess 
demonstrated  expertise  in 
Sybase  and  Oracle  database 
design  &  administration; 
demonstrated  expertise 
developing  application  in  Perl, 
Unix  shell  script,  SQL  and 
C++;  and  demonstrated 
expertise  in  data  modeling 
and  data  warehousing  mod¬ 
eling.  Salary  $77,000/yr,  M-F, 
9AM-5PM.  Send  2  resumes  to 
Case  #  200202126,  Labor 
Exchange  Office,  19  Staniford 
St.,  Istfl.,  Boston,  MA  02114. 
EOE.  Applicants  must  be 
U.S.  workers  eligible  to 
accept  full-time  employment 
in  U.S. 


PROGRAMMER/ANALYST 
sought  by  NJ  based 
Securities  Dealer.  Must  pos¬ 
sess  Bachelor's  or  equivalent 
in  Electronics  Engineering  or 
directly  related  field  and  2 
years  exp.  in  software  devel¬ 
opment/design  and  analysis, 
implementation  and  testing 
using  J2EE,  ASP,  PL/SQL, 
RDBMS,  Oracle,  UNIX, 
Windows.  Respond  to: 
Human  Resources  Depar¬ 
tment  #GLM-806RJ:  Knight 
Trading  Group,  Inc.,  525 
Washington  Blvd.,  Jersey 
City,  NJ  07310. _ 


Programmer:  Develop/write 

computer  programs  &  maintain 
company  Artificial  Intelligence 
systems  using  SICStus  PRO¬ 
LOG,  C++,  Java,  JavaScript, 
Win2000,  Unix,  etc.  Also  assist 
in  the  development  &  mainte¬ 
nance  of  company's  proprietary 
middle  tier  software  program. 
Req.  BS  in  Com.  Sc.  or  closely 
related  field  +  2  yr  exp.  in  job 
offer  or  Software  Engineering. 
Resume  to  Personnel  Mgr, 
WebTone  Technologies,  3535 
Piedmont  Rd,  Ste  800,  Atlanta, 
GA  30305 


Luckily,  We  Are  Too 


itcareers.com  is  now  powered 
by  CareerJournal.com! 

Search  for  jobs  and  post 
your  resume  here  on 


www.itcareers.com 
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Get  Ahead  In  Your  Career! 


BDPA,  The  Premier  Organization  For  African  Americans 
In  Information  Technology,  Invites  You  To  Attend  The... 


BDPA  National  Conference 


CAREER  EXPO 

August  15  -16,  2003  •  Philadelphia  Marriott 

Friday,  August  15:  10:00am  -  6:00pm  •  Saturday,  August  16:  10:00am  -  4:00pm 
FREE  ADMISSION  TO  THE  CAREER  EXPO! 

Employers  Include:  Abbott  Laboratories  •  Accenture  •  Advanced  Reasoning  Systems  •  Anthem  Blue 
Cross  Blue  Shield  •  AstraZeneca  •  Cardinal  Health  •  Computer  Associates  •  Compuware  Corporation  • 
Dell  Computer  •  Deloitte  Consulting  •  FleetBoston  Financial  •  GlaxoSmithKline  •  Greenwich  Technology 
Partners  *  Hewitt  Associates  •  Household  International  •  Iowa  Human  Resource  Recruitment 
Consortium  •  Mayo  Clinic  •  McDonalds  Corporation  •  Merck  &  Company  *  Performigence 
Corporation  •  Sears  Roebuck  &  Co.  •  Siebel  Systems  •  Siemens  Business  Services  •  Thomson 
West  •  Toyota  Motors  •  Unisys  •  The  Vanguard  Group  •  Verizon  Wireless  •  Wachovia 

For  the  latest  information,  please  visit  us  at  vyww.shomeN.com/bilpa. 

Employers  -  To  exhibit  at  the  Career  Expo,  please  call  Gloriann  Clark  at  310-309-4409. 


To  register  or  get  more  information  on  attending  the 
conference,  which  features  over  30  workshops,  please  call 

8  0-727-BDPA  or  visit  us  at  wuuuu.bdpa.org/conference.cfm 


Sr.  SW  Engr.-  Develop,  inte¬ 
grate,  maintain  &  test  complex 
communication  protocols  includ¬ 
ing,  but  not  limited  to:  Sigtran, 
SS7/CCS7  &  ISDN.  Participate 
in  design  &  code  reviews  of  new 
SW  &  modifica'ns  to  exist'g  SW. 
Develop,  maintain  &  test  tele¬ 
com  applications  &  system  SW 
responsible  for  configuring  & 
controlling  the  system,  internal 
communication  between  SW 
entities,  fault  tolerant  &  redun¬ 
dant  operation  of  SW.  Analyze 
&  document  computerized  tele¬ 
com  system  SW  reqs.,  function¬ 
al  specs.,  architectural  specs.  & 
design  specs.  Must  have  M.S.  in 
Comp.  Eng'g,  Comp.  Sci.,  E.E. 
or  equiv.,  +  2  yrs.  exp.  in  job 
offered  or  2  yrs.  exp.  w/telecom 
SW  development.  (Exp.  may  be 
gained  before  or  after  M.S.).  In 
the  alternative,  employer  will 
accept  Bachelor's  degree  +  5 
yrs.  of  progressively  responsible 
post-grad  SW  development 
exp.,  including  2  yrs.  telecom 
SW  developmt.  exp.  Must  have 
proficiency  in  C  programming, 
as  well  as  knowledge  of  telecom 
protocols.  40  hrs/wk;  Salary: 
$92,833/yr.  Send  2  copies  of 
resume  to:  Case  #200201646, 
2002  Labor  Exchange  Office,  19 
Staniford  St  1st  FI,  Boston  MA 
02114. 


City  of 
retcNkan 


Ketchikan  Public  Utilities 
Telephone  Division  is  a  rural, 
wireline  telephone 
company  (LEC) 
servicing  over  8,000 
customers  with 
2,000  lines. 


KPU  is  currently  looking  for  a  person  with  knowledge  of  voice,  data, 
and  optical  communication  internetworking.  Knowledge  of  AFC 
DSLAM  &  Telliant  products  would  be  a  plus.  Intimate  knowledge  of 
Switched  Ethernet,  IP  Television,  Routing  Protocols,  TCP/IP,  and 
MPLS,  is  highly  desirable.  Exposure  to  DMS100  and  wireless  tech¬ 
nology  would  be  helpful.  Candidate  should  be  proficient  in  use  of 
advanced  diagnostic  tools  including  NMS  management  tools.  Must  be 
able  to  work  well  in  a  team  environment  and  provide  leadership  to  work 
tasks.  Minimum  of  4-years  work  experience  in  IP  IT  is  required,  forma! 
education  preferred.  This  is  a  full  time  position  contingent  on  six  (6) 
month  probation,  $33. 17/hr.  plus  benefits. 

This  position  is  open  until  filled.  Complete  job  description  and 
application  available  on  the  City's  Website  at 
www.city.ketchikan.ak.us  or  the  City  of  Ketchikan  334  Front 
Street,  Ketchikan,  AK  99901,  E-mail  carolh@city.ketchikan.ak.us 
or  Phone  (907)  228-5631.  EOE/AA. 


www  ity.ketchikan.ak.us 


Share  our  vision 

and  you'll  see  what's  possible. 

MasterCard.  Focused  on  Diversity. 

At  MasterCard  International,  we  believe  the  surest  way  to 
attract  and  retain  the  best  talent  is 
by  embracing  a  broad  spectrum  of 
ideas  and  opinions.  It's  this 
commitment  to  a  diverse  culture 
that  has  helped  make  us  a  leader 
in  the  global  payments  industry. 

To  learn  more  about  opportunities 
at  MasterCard,  visit  us  at  www.mastercardintl.com 


MasterCard 

international 


An  equal  opportunity  employer. 


Programmer/System  Analysts, 
S/W  Engineers  wanted  by 
Innovative  Consulting.  Cand¬ 
idates  must  have  degree.  Skills 
in  Oracle,  Java,  SAP,  SQL,  VB. 
WebLogic/WebSphere  &  Unix 
will  have  preference.  Travel 
required  for  some  positions. 
Please  send  resumes  to: 
info@icscorpusa.com. 

Medical  Data  Processing  is  look¬ 
ing  for  system  analyst,  database 
administrator.  Duties  include 
design  &  implement  web  based 
medical  billing  software  &  sys¬ 
tems.  Qualified  candidates  must 
have  minimum  BS  with  experi¬ 
ence  using  Java,  Java  Swing. 
Apply  at  leonard@mdp.com. 
EOE 


Prog/Analysts  to  analyze, 
design  and  develop  s/w  appls 
using  Java,  CORBA,  XML, 
XSLT.  HTML,  Jscript,  JDBC, 
etc.  under  Windows/UNIX  OS; 
perform  Enterprise  Application 
Integration  using  Vitria 
BusinessWare:  perform  onsite/ 
offsite  maintenance,  documen¬ 
tation,  debugging,  testing,  and 
code  optimization.  Require  BS 
or  foreign  equiv.  in  CS/Engg. 
(any  branch)  &  2  yrs  of  exp.  in 
IT.  F/T,  High  salary,  travel 
involved.  Resume  to  HR, 
Ordusion  Technologies,  Inc., 
3883  Rogers  Bridge  Road, 
Suite  504,  Duluth,  GA  30097 


Technical  Leads  needed. 
Seeking  candidates  possess¬ 
ing  BS  or  equiv.  and  rel.  work 
exp.  Part  of  the  req.  rel.  work 
exp.  must  include  2  years 
working  with  Unix  and  Oracle. 
Duties  include:  Plan  and  coor¬ 
dinate  IT  projects;  Supervise 
and  direct  team.  Work  with 
Unix,  RDBMS,  Oracle,  .NET 
Technologies  and  PL/SQL. 
Mail  res.,  ref.  and  salary  req. 
to;  Computer  Consulting 
Corporation,  10  W.  Park 
Street,  Metals  Bank  Building, 
Suite  612,  Butte,  MT  59701. 


Programmer/Analyst,  Must 
have  Bacheior’s  in  Computer 
Science  or  its  functional 
equiv.,  and  2yrs  exp.  Oversee 
company  technology  system; 
analyze  user  needs,  system 
capabilities.  Install,  upgrade 
software.  Develop  programs 
to  improve  production  or 
workflow  as  req’d.  40  hrs/wk, 
9AM-5PM.  Competitive 
salary.  Send  resume  to:  USA 
Grocers  Management,  7284 
W.  Palmetto  Park  Rd„  Ste 
101  South,  Boca  Raton,  FL, 
33433. 


Computer  Programmer,  de¬ 
velop  &  write  business  apps 
computer  progs,  using  Java, 
JSP,  JDBC  &  SQL  for  docu¬ 
menting,  data  entry,  retrieval 
&  testing  prog  websites.  Req: 
B.S.  in  Computer  Science, 
Computer  Engineer  or  Elec¬ 
trical  Engineer.  40  hrs/wk. 
Job/interview  site:  San  Bern¬ 
ardino,  CA.  Send  resume  to: 
Econo  Lube  N  Tune,  1685  W. 
Kendall  Dr,  San  Bernardino, 
CA  92407. 


Network  Engineer:  (2)  Job 
location:  Matthews,  NC. 
Design,  develop  &  imple¬ 
ment  software  solutions. 
Analyze  requirements  for 
reservations  sys.,  account¬ 
ing,  credit  cards,  payroll  & 
personnel.  Test  procedures 
&  perform  network  adm. 
Req.:  Bachelor's  deg.  (or 
equiv.)  in  Comp  Info.  Sys. 
(or  other  IT  field  or  related). 
Resume  to:  NDASR 

Investments,  1600  S.  Hwy. 
81/287,  Decatur,  TX  76234. 


Software  Eng'r 

Q-Lytics  Consulting  Inc.  seeks 
Software  Dev’t  Eng'r  in 
Wescosville,  PA.  Assist  to  devel¬ 
op  applications  incl.  Oracle  + 
Web  applies  (standalone  +  n- 
tier).  Analyze  software  req's; 
work  w/  eng.  team;  dev  testing, 
programming  +  docs;  upgrades 
+  maint;  also  db  design  +  mod¬ 
eling.  Use  technologies  incl. 
UML,  IBM  WebSphere,  Web- 
Logic,  Java,  J2EE,  XML,  ERP, 
Oracle,  DB2,  CRM,  Jbuilder, 
Visual  Age  for  Java,  Toad, 
DBArtisan  +  Vantive.  Must 
have  Masters  in  Computer  Sci.  + 
6  mos  relevant  exp.  Resume  to 
Q-Lytics,  H.R.,  1011  Brookside 
Road,  Ste.  140,  Wescosville  PA, 
18106. 


Seeking  qualified  applicants  for  the 
following  positions  in  Memphis/ 
Collierville,  TN:  Senior  Programmer 
Analyst.  Formulate/define  function¬ 
al  requirements  and  documentation 
based  on  accepted  user  criteria. 
Requirements:  Bachelor’s  degree* 
or  equivalent  in  computer  science, 
MiS,  math,  engineering  or  related 
field  plus  5  years  of  experience  in 
systems/applications  development 
Experience  with  J2EE  development 
using  UML  modeling;  UNIX  Script¬ 
ing;  and  SQL  Scripting  also  re¬ 
quired.  "Master's  degree  in  appro¬ 
priate  field  will  offset  2  years  of 
general  experience.  Submit  res¬ 
umes  to  Sibi  George.  FedEx 
Corporate  Services,  1900  Summit 
Tower  Blvd.,  Suite  1400,  Orlando. 
FL  32810.  EOE  M/F/D/V. 


Prog  Analysts  to  analyze,  design, 
code  and  maintain  web/client 
server  applications  using  Java, 
C,  C++,  CORBA,  J2EE,  HTML, 
Servlets,  XML,  Weblogic  Server, 
IIS,  Oracle,  MS  Access  etc  under 
Windows,  Sun  Solaris  OS;  per¬ 
form  automation  of  functional/ 
regression  testing  with  Win- 
Runner,  eTester  and  Astra  Quick 
Test;  provide  on  site  mainte¬ 
nance  support  such  as  debug¬ 
ging,  modifications,  fine  tuning  & 
code  optimization.  Require:  BS 
or  foreign  equivalent  in  CS / 
Engg(any  branch)  with  2  yrs  exp 
in  IT.  High  salary.  F/T,  Travel 
involved.  Resume  to:  HR, 
Semafor  Technologies,  Inc,  3300 
Holcomb  Bridge  Road,  Suite 
212,  Norcross,  GA  30092. 
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Senior  Software  Developer  to 
participate  as  high  level  techni¬ 
cal  expert  in  the  design,  devel¬ 
opment,  coding,  testing,  and 
debugging  of  financial  distrib¬ 
uted  applications  including, 
Centralized  Transaction  Module 
for  trade  processing.  High 
Volume  Client  Transactional 
Web  Applications,  and 
Depository  Trust  &  Clearing 
Corp.  and  Federal  Reserve  and 
Legacy  applications.  Utilize 
Rational  Suite  of  products  for 
design  and  Web-based  solu¬ 
tions  for  development. 
Specifically,  design  and  develop 
enterprise-wide  applications  ser¬ 
vices  using  Java  J2EE  applica¬ 
tion  server,  IBM  MQ  middleware 
solutions,  and  Oracle  database 
systems.  Develop  applications 
for  real-time  systems  using 
Java.  HTML,  Javascript,  Shell 
Scripts,  XML,  XSLT,  and 
PL/SQL.  Work  on  UNIX, 
Windows  NT.  and  SUN  OS  oper¬ 
ating  systems,  and  use  Java, 
C++,  and  C  languages.  Also 
assist  junior  Software 
Developers  to  implement  techni¬ 
cal  designs  and  support  devel¬ 
opment  processing  including 
database  design.  Requirements: 
Master  Degree  in  Computer 
Science,  Engineering  or  a  close¬ 
ly-related  field  and  three  (3) 
years  experience  in  job  offered 
or  three  (3)  years  experience  as 
Software/Systems  Engineer  OR 
Bachelor  Degree  and  five  (5) 
years  progressive  experience. 
Candidate  must  also  possess 
demonstrated  expertise  design¬ 
ing  and  developing  enterprise¬ 
wide  applications  services  using 
Java  J2EE  application  server, 
middleware  solutions,  and 
Oracle  database  systems; 
demonstrated  expertise  design¬ 
ing  and  developing  applications 
using  Rational  Unified  Process 
and  WebGain  Studio  tools; 
demonstrated  expertise  devel¬ 
oping  IBM  MQ  based  applica¬ 
tions  involving  exchange  of  data 
between  Legacy  and  UNIX  sys¬ 
tems;  and,  demonstrated  exper¬ 
tise  developing  applications  for 
real-time  systems  using  Java 
Servlets,  Shell  Scripts,  XML, 
XSLT,  HTML,  and  PL/SQL.  40+ 
hours/week,  9:00AM  to  5:00PM, 
$86, 300/year.  Submit  two  (2) 
copies  of  resume  to  Case 
#200202570,  Labor  Exchange 
Office,  19  Staniford  Street,  1st 
floor,  Boston,  MA  02114.  Must 
have  proof  of  legal  authority  to 
work  permanently  in  the  U.S. 


Programmer,  Engg  &  Sc.,  8a-5p, 
40  hrs/wk.  Formulate  tech'i 
specs  for  mechanical  &  industri¬ 
al  processes/procedures  auto¬ 
mation  &  applies;  prep  detailed 
workflow  chart  for  input,  output 
&  logical  operations;  test  systm; 
prep  tech'i  documentation;  prgm 
websites  using  client-server 
technology,  e-commerce  appli¬ 
cation  dvlpmt,  Java,  EJB,  JSP  & 
XML.  Bach  or  equiv  deg  w/major 
in  Info  Systms,  Comp  Sci  or 
Engg,  Electronics,  Electrical, 
Mechanical,  Industrial  or  related 
Sci/Engg.  1  yr  exp  in  job  or  as 
comp  profl  w/above  skills. 
Resume  to:  GTS,  Inc.  3761 
Venture  Dr.,  Bldg.  100,  Suite 
#240,  Duluth,  GA  30096. 


Telephony  Solutions  Developer: 
BS  +  2  yrs  exp  to  incl  Dialogic 
GLobalCall,  ATL,  Visual  C++, 
Visual  Studio.NET,  SQL  Server, 
COM/DCOM,  Brooktrout 
RealCT  SDK  &  call  processing 
on  digital  &  analog  circuits  req. 
Systems  Analyst:  BS  +  2  yrs  exp 
to  incl  Visual  Studio,  SQL 
Server.  Visual  C++,  ATL.  Exp 
reqd  in  documenting  scope  & 
dsgn,  dvlpmt  &  deployment  of 
NET  solutions  req.  Both  pos  req 
MCSD  &  demonstrated  busi¬ 
ness  communication  skills  as 
well  as  verifiable  refs  for  above 
reqmts.  Apply  to  jobs2003@a-t- 
g.com,  Des  Moines,  IA 


Senior  Software  Engineer: 
Design,  develop,  &  implement 
off-the-shelf  software  solutions 
providing  web-based  billing  & 
presentment,  &  account  man¬ 
agement  using  Java  in  a  UNIX, 
Solaris,  &  NT  shrink-wrapped 
development  environment. 
Analyze  &  design  software  appli¬ 
cations  in  n-tiered,  web-based 
environment  using  OOA/OOD 
principles  &  UML  modeling 
tools.  Debug  &  solve  complex 
problems  in  distributed  environ¬ 
ments  using  VisiBroker,  C++, 
Netscape,  Oracle,  VisualCafe, 
VJ++,  &  Integrated  Develop¬ 
ment  Environment  tools  from 
Microsoft.  Design,  implement,  & 
test  relational  database  com¬ 
prised  of  stored  procedures  & 
triggers  to  maintain  data  integri¬ 
ty  with  Oracle  &  MS-SQL. 
Implement  GUI  tools,  elements 
in  user  interface  &  business 
logic  using  Java/XML,  Visual 
Basic,  C/C++  programming  & 
Internet  communications/securi¬ 
ty  skills.  Design,  develop,  & 
implement  n-tier  architecture 
solutions  for  internet  based 
applications  on  Windows  plat¬ 
form  using  IIS,  ASP,  SQL,  & 
native  Windows  technologies. 
Bachelors  degree  (or  foreign 
equiv.)  in  Comp.  Sci/  Comp. 
Eng'g/Elect.  Eng'g  or  closely 
related  field,  &  5  yrs  of  progres¬ 
sively  responsible  experience  in 
job  offered  or  as  Software 
Developer/Eng'g.  In  lieu,  will 
accept  Master's  degree  (or  for¬ 
eign  equiv.)  in  Comp.  Sci/ 
Comp.  Eng'g/Elect.  Eng'g,  or 
closely  related  field,  plus  3  yrs  of 
experience.  Requires  demon¬ 
strated  expertise  in  completion 
of  2  full  development  cycles  in 
Windows  environ.,  including 
analyzing  &  designing  software 
applications  using  OOA/OOD 
principles  &  UML  modeling 
tools.  &  demonstrated  expertise 
in  analyzing  various  legacy  print 
stream  data  file  formats,  includ¬ 
ing  Advanced  Function 
Presentation,  MetaCode,  DJDE, 
&  PDF,  as  well  as  architecting 
solutions  for  extracting  &  manip¬ 
ulating  data.  40+  hrs/wk;  8a-5p 
(M-F);  $90,500.00/yr.  Submit 
resume  in  duplicate  to:  Case 
#200202545,  Labor  Exchange 
Office,  19  Staniford  St,  1st  fl, 
Boston,  MA  02114.  EOE 


SOFTWARE,  Sr. 
Systems  Analyst. 
Complete  Business 
Services  in  SF,  C++, 
Java,  ASP,  Silktest  (or 
equiv).  Test/develop 
software  systems  and 
products.  MSCS/IS.  1 
yr.  exp.  Salary 
$80,890.  Fax  resume 
(415)  584-5226. 


Programmer  Analyst 
needed  w/exp  in  using 
Sybase,  MS  SQL 
Server,  Erwin,  CAST, 
Rational  Rose,  VB,  MS 
Access,  JAD,  RAD,  Sun 
Solaris  &  Windows 
2000.  Send  resumes  to: 
Triple  Point  Tech.,  Inc., 
301  Riverside  Ave., 
Westport,  CT  06880.  No 
in  Person  Resumes. 


TechNation  Software  Consulting, 
Inc,  a  software  consulting  company 
with  its  main  place  of  business  at 
Sioux  Falls,  SD  has  multiple  posi¬ 
tions  for  Software  Professionals.  j 

Sr.  Software  Engineers:  BS  in  CS, 
or  equivalent  with  more  than  5  years 
of  recent  programming  experience 
or  MS  in  CS  with  more  than  3  years 
of  such  experience.  Duties  entail 
programming,  gathering  user  re¬ 
quirements  and  customization  of 
software  in  either  of  a)  Database 
Systems  which  involves  database 
design,  data  modeling  working  in 
both  front  end  as  well  as  backend 
applications  on  Unix  and  Windows 
platforms.  Or  in  b)  systems  side  pro¬ 
gramming  in  Unix.  C,  C++  which  in¬ 
volves  product  development,  work¬ 
ing  on  telecom  protcols  or  develop¬ 
ment  of  device  drivers. 

Both  positions  require  knowledge  of 
allied  Internet  technologies  like 
Java,  JSP.  XML.  J2EE  and  ASP. 
Unix  Systems  administrators:  BS 
in  Computer  Sciences  or  equivalent 
with  atleast  five  years  of  experience 
in  an  enterprise  environment,  (i.e. 
more  than  500  users)  Duties  include 
extensive  use  of  Network  Imple¬ 
mentation  and  Administration,  Sys¬ 
tem  Integration,  Backup  and  recov¬ 
eries,  shell  scripting  and  System 
Securities.  Experience  in  Manage¬ 
ment  of  Enterprise  Network  Storage 
devices  (SAN  or  NAS),  HP  and 
Solaris  Servers,  switches,  HUBs 
and  in  Veritas  NetBackup  systems. 

TechNation  provides  onsite  consult¬ 
ing  services  to  clients  across  the 
United  States  and  hence  a  key 
requirement  for  all  positions  is  that 
candidates  must  be  willing  to  relo¬ 
cate  across  the  country  for  periods 
between  3-6  months  or  as  needed. 

Send  resumes  to  Rona  Troff,  300  N. 
Dakota  Ave.  Suite  #505-B,  Sioux 
Falls,  SD  57104  or  email  to 
rtroff@tnscinc.com.  Fax:  530-733- 
2775. 

IT  Consultant:  Roundarch,  Inc. 
seeks  an  individual  for  its  Chicago 
office  to  develop  &  deploy  complex 
web  content  management  systems 
(CMS)  &  portal  systems  for  consult¬ 
ing  clients  using  web-based  devel¬ 
opment  techniques  &  JAVA,  HTML, 
DHTML  &  XML  languages.  Suc¬ 
cessful  candidates  will  have  a  rele¬ 
vant  Bachelor's  degree  in  CS,  EE 
or  related  and  at  least  4  yrs.  exp.  in 
software  development  consulting, 
at  least  3  yrs  of  which  is  in  web- 
based  development  of  content 
management  systems  using  HTML 
&  XML.  Resume  to:  Roundarch 
Inc.,  c/o  Deloitte  Consulting,  attn 
Cathe  Slocum,  2  Tower  Center 
Blvd,  East  Brunswick,  NJ  08816  or 
fax  732-296-6454. 

Computer  Support  Specialist  - 
Assist  &  maintain  networked 
comp.  system  manag'g 
d/base,  dvlpg  customized 
reports  thru  integrated  info 
system.  Dvlp  bilingual 

(Eng/Span)  website  &  tech, 
SQL,  applies  &  VB  doc.  Write 
interfaces  &  modify  system  to 
S.  Amer  format  to  meet  needs 
of  Latin  Amer  mkt.  Train 
users.  35  hrs.  2  yrs  coll  Syst 
Engg  or  Info  Syst  (or  for 
equiv)  +  2  yrs  exp.  Fax 
resume  &  salary  reqmts  to  Mr. 
Perez,  (305)  275-4559. 
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Software  Engineer  to  design, 
engineer,  install  and  support 
computer  systems  to  run  JD 
Edwards  One  World  and/or 
World  on  Windows  and/or 
midrange  environments. 
Create  and  configure  non-stan¬ 
dard  OneWorld  environment 
based  on  client's  requirements 
by  creating  new  environment, 
path  code,  database  and  their 
configuration.  Bachelors 
Degree  in  Engineering  or 
Computer  Science  and  five 
years  experience  or  Masters 
Degree  and  Two  years  experi¬ 
ence. 

Systems  Engineer  to  install  and 
configure  OneWorld  ERP 
System.  Install  OneWorld 
Deployment  and  OneWorld 
Enterprise  Server  on  Windows 
platform.  Setup  and  Manager 
CNC  activities  of  OneWorld  ERP 
Systems.  Install  and  provide 
assistance  with  Citrix  Software. 
Perform  Backup  of  the  System 
(OneWorld  &  SQL  Server). 
Create  and  configure  non-stan¬ 
dard  OneWorld  configuration. 
Bachelors  Degree  in  Computer 
Engineering  and  Two  Years 
Experience.  Send  resume  to 
Bellsoft  Inc.  8770  W.  Bryn  Mawr 
Ave.,  Suite  1300,  Chicago,  IL 
60631 


Systems  Analyst.  Job  location: 
Boulder,  CO.  Duties:  Use  IBM 
mainframe  comp.  SP2/RS6000  in 
an  AIX  environ,  to  analyze  & 
design  techniques  to  spt.  system 
develop.  &  integration  testing. 
Develop  tools  &  techniques  for 
automation.  Perform  system 
admin.,  security,  infrastructure 
design  &  build  relating  to  Linux  on 
Intel  arch.  Troubleshoot  tech, 
defects  in  oper.  system  &  hard¬ 
ware  arch.  Provide  problem  reso¬ 
lution.  Mentor  &  train  jr.  systems 
administrators.  Requires:  B.S.  (or 
foreign  equiv.)  in  Comp.  Sci., 
Eng.  or  a  related  field  &  2  yrs. 
exp.  in  the  job  offered  or  2  yrs. 
exp.  as  a  Prog/Analyst,  Consult, 
or  IT  Specialist.  Concurrent  exp. 
must  incl.  2  yrs.  exp.  using  IBM 
mainframe  computers  SP2/RS- 
6000  in  an  AIX  environ.  &  2  yrs. 
exp.  troubleshooting  tech,  defects 
in  oper.  system  &  hardware  arch. 
Send  resume  (no  calls)  to: 
Donald  Crockett,  CTG,  Inc.,  4699 
Nautilus  Court  South,  Ste.  101, 
Boulder,  CO  80301-5306. 


SENIOR  SOFTWARE  ENGI¬ 
NEER  to  design,  develop,  con¬ 
figure  and  debug  real-time 
embedded  software  for 
GSM/GPRS  cellular  communi¬ 
cation  systems  using  SDL,  C, 
C++  and  Assembly  language, 
as  well  as  software  configuration 
management  tools  including 
Clear  case  and  Clear  quest; 
Responsible  for  unit  and  integra¬ 
tion  testing  of  Layer  2  and  Layer 
3  of  GSM/GPRS  protocol  stack 
software;  Develop  test  scripts 
on  Anite  and  R&S  Protocol  test 
systems  for  GSM/GPRS  mobile 
station  conformance  specifica¬ 
tion.  Require:  B.S.  degree  in 
Computer  Science,  an  Engin¬ 
eering  discipline,  or  a  closely 
related  field  with  5  yrs  of  pro¬ 
gressively  responsible  exp  in 
the  job  offered  or  as  a 
Programmer/Analyst  or  Progr¬ 
ammer.  Competitive  salary 
offered.  Apply  by  resume  to: 
Nancy  Geraghty,  Panasonic 
Mobile  Communications 

Development  Corp.  of  USA, 
1225  North  Brook  Pkwy., 
Suwanee,  GA  30024;  Attn:  Job 
SP. 


Network  Systems  Data  Comm. 
Analyst.  Job  location:  New  Castle, 
DE.  Duties:  Provide  tech/infra¬ 
structure  support  &  implem.  ser¬ 
vices  to  Latin  Amer.  user  base. 
Perform  UNIX  system  admin.  HP- 
TRU64-SUN  a  provide  opers. 
support  for  Basic  Cosmos  appls. 
Perform  proj.  mgmt.  on  end-to- 
end  tech,  implem.  on  appls. 
CACLSweb,  Exceller,  Flexcube  a 
E-credit  appls.  for  Latin  Amer. 
countries.  Resp.  for  implem.  of 
Oracle,  migration  of  VAX  appls.  to 
UNIX,  a  install.,  design  a  rollout  of 
NDM,  MQ  Series  a  OPC. 
Requires:  B.S.  (or  foreign  equiv.) 
in  Comp.  Sci.,  Eng.  or  a  related 
field  a  2  yrs.  exp.  in  the  job  offered 
or  2  yrs.  exp.  as  a  Consultant  or 
Specialist.  Concurrent  exp.  must 
incl.  2  yrs.  exp.  providing  tech / 
infrastructure  spt.  for  Latin  Amer. 
countries  a  2  yrs.  exp.  performing 
UNIX  system  admin.  Send 
resume  (no  calls)  to:  Molly  Stone, 
CTG  Inc.,  800  Delaware  Ave., 
Buffalo,  NY  14209-2094. 


Local  Computer  Consulting 
Company  looking  for  the  follow¬ 
ing: 

Computer  Programmer/tester 

Person  will  be  involved  in  creat¬ 
ing  test  and  production  databas¬ 
es  and  tablespaces  on  different 
containers  and  raw  devices. 
The  bufferpool  sizes  are  esti¬ 
mated  ,  the  database  functions 
are  done  using  software  known 
as  db2artisan  extracting  sql 
scripts.  Migration,  loading,  reor¬ 
ganizing,  etc.  Tuning  Para¬ 
meters  using  benchmark  testing 
methods  using  the  DB2BATCH 
Utility.  The  different  backup 
strategies  like  export,  import 
environment:UDB7.1,  AIX  4.3, 
DB2,  Oracle  8.0.4,  Win-NT. 
Rate  of  Pay:  $  61,000.00/per 
year,  Hrs:40/wk  (8am-5pm). 
Must  have  bachelor's  degree  in 
computer  science  (or  equiva¬ 
lence)  +  2years  as  a  computer 
programmer  or  an  information 
technology  programmer.  Must 
be  willing  to  accept  long  term 
assignments  at  client 's  premis¬ 
es.  Mail  resume  to:  Case  # 
200112945  Labor  Exchange 
Office  19  Staniford  St.,  1st  fl, 
Boston,  MA02214.a 


Computer/Info  Systems 

Lowe's  Companies,  Inc.,  a  lead¬ 
ing  provider  in  home  improve¬ 
ment  products,  is  currently  seek¬ 
ing  applicants  in  Wilkesboro,  NC 
for  various  levels  of  Database 
Administrators,  Data  Systems 
Analysts,  MIS  (Analysts, 
Programmers  and  Trainees)  and 
Programmers.  Depending  upon 
the  position,  applicants  must 
possess  a  BS  or  MS  and/or 
equivalent  combination  of  edu¬ 
cation  and/or  experience  and 
related  skills. 

Resumes  should  be  submitted 
with  a  cover  letter  referencing 
specific  job  title  of  interest  to:  P. 
Norwood,  Corp.  Recruiter, 
Lowe's  Companies,  Inc.,  1605 
Curtis  Bridge  Rd.,  Wilkesboro, 
NC  28697.  APPLICATIONS 
SUBMITTED  WITHOUT  REF¬ 
ERENCE  TO  JOB  TITLE  WILL 
NOT  BE  ACCEPTED.  EOE 
M/F/D/V 


Computer  Programmer  -  Convert 
project  specifications  and  state¬ 
ments  of  problems  and  proce¬ 
dures  to  detailed  logical  flow 
charts  for  coding  into  computer 
language.  Develop  and  write 
computer  programs  to  store, 
locate,  and  retrieve  specific  doc¬ 
uments,  data  and  information. 
Program  websites.  Work  under 
direction  of  supervisor,  Work 
internally  at  company.  Must  have 
Bachelors  of  Science  Degree  in 
Computer  Science  or  Math  and  1 
yr.  Of  computer  professional-re¬ 
lated  exp.  Must  have  1  yr.  Exp.  in 
converting  project  specifications 
and  statements  of  problems  and 
procedures  to  detailed  logical 
flow  charts  for  coding  into  com¬ 
puter  language;  developing  and 
writing  computer  programs  to 
store,  locate,  and  retrieve  specif¬ 
ic  documents,  data  and  informa¬ 
tion;  and  programming  websites. 
Must  have  1  yr.  Exp.  with  Java, 
Java  Servlets,  HTML  or  UNIX.  40 
Hrs./wk.,  $34956. 00/yr.  Submit 
resume  referencing  job  order 
#1101778  to  Iowa  Workforce 
Center,  800  7th  St.,  SE,  Cedar 
Rapids,  Iowa  52406-0729. 
Employer  paid  advertisement. 


Jaypar,  Inc. 

Seeking  IT  Professionals 

•  Programmers/Analysts 
■  Software  Engineers 

Experience  and  skills  in  most  of 
the  following  areas  are  required: 

Java,  J2EE,  EJB,  .NET,  ASP, 
VB,  VC++,  XML,  BroadVision, 
WebLogic,  Sun  Enterprise/Ultra/ 
Sparc,  PL/SQL,  Oracle, 
Peoplesoft  and  SAP 
Applications. 

B.S.,  M.S.  or  MCA  or  higher 
education  with  good  under¬ 
standing  of  programming,  web 
technologies  and  databases  are 
essential.  At  least  three  years  of 
prior  industry  experience  is  a 
must.  Excellent  communication 
and  presentation  skills  a  must. 
Applicant  must  be  open  to  fre¬ 
quent  travel  and  relocation. 
Send  resumes  to  Attn:  Human 
Resources  at  3730  Garand 
Road,  Ellicott  City,  MD  21042. 
NO  PHONE  CALLS  PLEASE. 


SOFTWARE  ENGINEER 
Software  engineer  to  design, 
develop  and  test  computer  pro¬ 
grams  for  business  applications; 
analyze  software  requirements 
to  determine  feasibility  of 
design;  direct  software  system 
testing  procedures  using  exper¬ 
tise  in  IIS  5,  VB,  WINS,  DHCP, 
NetlQ  and  NNM.  Requirements: 
Bachelor's  Degree  or  equivalent 
in  Computer  Science  or  related 
field  and  two  years  experience 
as  a  software  engineer  or  com¬ 
puter  programmer,  knowledge  of 
IIS  5,  VB,  WINS,  DHCP,  NetlQ 
and  NNM.  Salary:  $80,000/ 
year.  Working  Condtions:  8:00 
A.M.  to  5:00  P.M.,  40 

hours/week,  involves  extensive 
travel  and  frequent  relocation. 
Apply:  Site  Manager,  Armstrong 
County  CareerLink,  1270  North 
Water  Street,  PO  Box  759, 
Kittanning,  PA  16201,  Job  No. 
WEB347292. 


SOFTWARE  ENGINEER 
Software  engineer  to  design, 
develop  and  test  computer  pro¬ 
grams  for  business  applications; 
analyze  software  requirements  to 
determine  feasibility  of  design; 
direct  software  system  testing  pro¬ 
cedures  using  expertise  in  Oracle 
Financials  1 1  i,  TOAD,  Discoverer 
3i,  Taviz  Integration  Studio  & 
Biztalk.  Requirements:  Bachelor's 
Degree  or  equivalent  in  Computer 
Science  or  related  field  and  two 
years  experience  as  a  software 
engineer  or  computer  program¬ 
mer,  knowledge  of  Oracle 
Financials  11  i,  TOAD,  Discoverer 
3i,  Taviz  Integration  Studio  & 
Biztalk.  Salary:  $85, 000/year. 
Working  Conditions:  8:00  A.M.  to 
5:00  P.M.,  40  hours/week, 

involves  extensive  travel  and  fre¬ 
quent  relocation.  Apply:  Fayette 
County  CareerLink,  Attn: 
CareerLink  Program  Supervisor, 
32  Iowa  Street,  Uniontown,  PA 
15401,  Job  No.  WEB347305. 


SOFTWARE  ENGINEER 
responsible  for  all  four  phases  of 
SDLC;  Design,  develop,  test 
and  implement  application  soft¬ 
ware  in  a  client/server  environ¬ 
ment  using  J2EE,  WebSphere 
Application  Server,  UML  (OOAD 
Model),  Rational  Rose,  Java 
Servlets,  WSAD,  Jakarta  Struts, 
EJB,  XML,  JSP,  JDBC,  Java- 
SQL  and  Java  Beans;  Develop 
Triggers  and  Stored  Procedures 
using  DB2,  Oracle  and  Java. 
Require:  Master's  degree  in 
Computer  Science/Engineering, 
or  a  closely  related  field  with  2 
yrs  of  exp  in  the  job  offered  or  as 
a  Programmer/Analyst.  Compe¬ 
titive  salary  offered.  Apply  by 
resume  to:  Dave  Bloomquist, 
Global  Software  Development 
Services,  Inc., 10  South  5th  St., 
Ste.  700,  Minneapolis,  MN 
55402;  Attn:  Job  PC. 


SENIOR  SOFTWARE  ENGI¬ 
NEER  to  design,  develop,  test, 
implement,  maintain  and  sup¬ 
port  web-based  and  client/serv¬ 
er  application  software  in  a 
multi-tier  environment  using  C, 
C++,  Visual  Basic,  ASP, 
COM/DCOM,  .NET,  Java,  SAP 
(ERP),  Oracle,  MS  SQL  and 
DB2  under  Windows  95/98/ 
NT/2000,  UNIX  and  MS  DOS 
operating  systems.  Require: 
B.S.  degree  in  Computer 
Science,  an  Engineering  disci¬ 
pline,  or  a  closely  related  field 
with  5  yrs  of  progressively 
responsible  exp  in  the  job 
offered.  Extensive  travel  on 
assignment  to  various  client 
sites  within  the  U.S.  is  required. 
Competitive  salary  offered. 
Apply  by  resume  to:  Ravi 
Kandimalla,  Everest  Computers 
Inc.,  900  Old  Roswell  Lakes 
Pkwy,  Ste  300,  Roswell,  GA 
30076;  Attn:  Job  EA. 
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Software  Engineer 

Design,  Test,  Document 
and  Update  Software  ap¬ 
plications.  Prefer  a  Bach¬ 
elor’s  Degree  or  Foreign 
equivalent  in  a  Business 
Or  computer  related  field. 
Send  resumes  to: 

Epoch  Solutions  Inc. 
One  Northfield  Plaza, 
Suite  300 

Northfield,  IL  60093 
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Senior  Software  Engineer:  Re¬ 
sponsible  for  designing  &  imple¬ 
menting  extensions  &  functional¬ 
ities  to  BGP,  OSPF,  ISIS,  and 
BGP-MPLS  VPNs  routing  proto¬ 
cols.  Will  make  scalability  &  per¬ 
formance  improvements  on  Avici 
router  product  by  implementing 
proprietary  solutions  &  IETF  (In¬ 
ternet  Engineering  Task  Force) 
proposed  extension  to  the  proto¬ 
cols.  Will  work  closely  with  ATM, 
Frame-Relay,  &  PPP  media  & 
address  interoperability  issues 
with  Cisco  &  Juniper  routing  ven¬ 
dors.  Also  responsible  for  sup¬ 
port  &  maintenance  of  current 
routing  protocol  features.  Bach¬ 
elor’s  degree  in  Eng’g,  Comp. 
Sci.  or  closely  related  field,  &  5 
yrs  experience  in  job  offered  or  in 
IP  software  development.  In  lieu 
of  this,  will  accept  Master’s  de¬ 
gree  in  Electr.  Eng'g/Computer 
Science  &  2  yrs  exper.  Requires 
demonstrated  expertise  in  devel¬ 
oping  routing  protocols  (BGP, 
ISIS,  BGP-MPLS,  VPNs);  imple¬ 
menting  router  performance  & 
scalability  solutions;  Cisco  & 
Juniper  routing  behavior  to  ad¬ 
dress  interoperability  issues; 
and,  Real-time  Embedded  Sys¬ 
tems  &  Vxworks  Operating  Sys¬ 
tems.  40_  hrs/wk;  8a-5p  (M-F); 
$85,072/yr.  Submit  resume  in 
duplicate  to:  Case  #200202653, 
Labor  Exchange  Office,  19 
Staniford  St,  1st  fl,  Boston,  MA 
02114.  EOE 


Required  a  suitable  candidate 
with  more  than  five  years  of 
experience  in  the  IT  industry. 
Responsible  for  system  analy¬ 
sis,  design,  development  of  var¬ 
ious  B2B  applications.  Required 
BS  in  CS  and  experience  in 
complex  distributed  internet 
architecture,  developing  and 
implementing  business  systems 
on  the  web.  A  strong  back¬ 
ground  in  business  analysis 
along  with  proficiency  in  J2EE 
technologies  including  JSP/ 
Servlets,  ASP,  EJB,  JDBC,  JMS, 
JTA  ,  JAX.  Prior  working  knowl¬ 
edge  of  OOA  and  OOD  using 
UML.  Proven  track  records  nec¬ 
essary.  40  hrs/wk,  9:00-5:00, M- 
F,  $31.25  per  hr.  OT  as  needed. 
Apply  with  confidence  to:  HR 
Dept,  Pan  Bright  Consulting, 
Inc.,  PO  Box  0865,Elmsford,  NY 
10523-0865. 


SENIOR  PROGRAMMER/ANA¬ 
LYST  to  analyze,  design,  devel¬ 
op,  test,  implement  and  support 
application  software,  workflows 
and  interfaces  in  SAP/R3  using 
ABAP/4,  SAP  Script,  RFCs, 
IDOCs,  BAPIs  and  ALEs  on 
UNIX  and  Windows  platforms. 
Require:  B.S.  degree  in  Comp¬ 
uter  Science,  an  Engineering 
discipline,  or  a  closely  related 
field  with  2  yrs  of  exp  in  the  job 
offered  or  as  a  Software 
Engineer.  Extensive  travel  on 
assignment  to  various  client 
sites  within  the  U.S.  is  required. 
Competitive  salary  offered. 
Apply  by  resume  to:  Ravi 
Kandimalla,  Everest  Computers 
Inc.,  900  Old  Roswell  Lakes 
Pkw,  Ste  300,  Roswell,  GA 
30076;  Attn:  Job  VC. 


Full-time  Programmer  Analyst. 
Must  have  a  Bachelors  Degree 
in  Computer  Science  or  related 
field.  Foreign  degree  equivalent 
accepted.  Educational  or  work 
background  must  have  included 
the  following  skills:  "Promising 
Related"  Oracle  Applications, 
Oracle  Applications  11  i,  SQL, 
Report  Writes,  Unix,  MSQI, 
Oracle  ERP  applications  includ¬ 
ing  the  following:  OMS,  APS 
(GATP/SCP),  PL/SQL.  C,  Perl, 
MQSeries  and  XML.  Salary 
Competitive.  Send  resume  to: 
Robbin  Lee,  UPS  SCS,  12380 
Morris  Rd,  Alpharetta,  GA 
30005.  Employer  will  not  spon¬ 
sor  visas  for  this  position. 


Join  Citrix,  a  cutting-edge  team  that 
is  setting  new  benchmarks  for  suc¬ 
cess  and  a  company  that  has  earn¬ 
ed  a  reputation  as  a  market  leader! 

Software  Dev.  Engineers/Software 
Engineers  -  Research,  design  & 
develop  multiuser  software  applica¬ 
tions  based  on  Win  NT/2000  or 
web  tech.  Entry-level  positions 
avail,  for  candidates  w /  Bach.  deg. 
or  higher  in  comp,  sci ,  engrg.,  dis- 
trib.  sys.  or  CIS.  Educ.  or  exp  must 
include  at  least  3  of  the  following: 
Java,  C++,  XML,  JavaScript,  ASP- 
.NET,  Visual  C++  and  Windows  NT. 
(Job  Code  SE260).  More  sr.  posi¬ 
tions  avail,  for  candidates  w/  Bach, 
deg.  or  higher  in  comp.  sci..  engrg., 
distrib.  sys.  or  CIS.  Must  have  3 
yrs’  exp.  in  the  design  &  dev.  of 
software  applications.  Exp.  must 
incl.  at  least  2  of  the  following: 
Java,  C++,  XML,  HTML  &  Win  NT. 
(Job  Code  SE261). 

Test  Engineers  -  Design,  write  & 
execute  system-level  test  cases  for 
network-based  multiuser  applica¬ 
tions  based  on  Win  NT.  Must  have 
Bach.  deg.  or  higher  in  comp,  sci., 
engrg.,  distrib.  sys.  or  CIS.  Educ.  or 
exp.  must  incl.  at  least  2  of  the  fol¬ 
lowing:  Open  Systems  environ¬ 
ment,  Win  NT.  network  admin., 
SQL  &  C++.  (Job  Code  SE262). 

Dev.  Support  Engineer  -  Design  & 
develop  secure  web-based  soft¬ 
ware  applications  to  expose  Citrix 
technologies  for  customers.  Must 
have  Bach.  deg.  or  higher  in  comp, 
sci.,  engrg.,  distrib.  sys.  or  CIS.  Ed¬ 
uc.  or  exp.  must  incl.  the  following: 
C++,  XML,  EJB,  COM+,  SQL  Ser¬ 
ver,  SOAP,  RMI  &  comp,  security. 
(Job  Code  TE351). 

Programmer/Analyst  -  Plan,  direct 
&  participate  in  analysis,  monitoring 
&  reporting  of  Customer 
Relationship  Management  (CRM) 
systems  using  object-oriented  pro¬ 
gramming.  Must  have  Bach.  deg.  in 
comp,  sci.,  engrg,  distrib.  sys.  or 
CIS.  Must  have  5  yrs’  exp  in  appli¬ 
cation  dev.  &  object-oriented  pro¬ 
gramming.  Exp.  must  incl.  at  least  1 
yr  exp.  with  Vantive,  Visual  Basic, 
ASP  and  SQL  Server.  (Job  Code 
PA489). 

Technical  Writers  -  Plan,  organize, 
write  and  edit  customer-facing  doc¬ 
umentation  for  software  products. 
Must  have  Bach.  deg.  in  English  or 
tech,  writing.  In  lieu  of  stated  deg. 
will  accept  Bach.  deg.  in  another 
field  combined  with  2  additional  yrs' 
tech,  writing  exp.  Must  have  4  yrs’ 
exp.  writing  customer-facing  docu¬ 
mentation  for  software  products. 
(Job  Code  TW676). 

Technical  Linguist  -Translate  from 
English  to  German  and  proofread 
co.  components  incl.  software  and 
related  product  documentation. 
Must  have  Bach.  deg.  in  foreign 
language  &  translation.  For  native 
English  speakers  will  accept  deg. 
incl.  substantial  German  lang. 
courses.  For  native  German  speak¬ 
ers  will  accept  deg.  incl.  substantial 
English  lang.  courses.  Must  have  2 
yrs'  exp.  in  tech,  translation  involv¬ 
ing  software  documentation.  (Job 
Code  TL512). 

All  candidates  must  pass  compa¬ 
ny's  technical  review.  Forward 
resume  by  e-mail  to  citrixrecruit- 
ing@citrix.com  or  by  mail  to 
Recruiting,  Citrix  Systems,  Inc., 
851  W.  Cypress  Creek  Rd.,  Ft. 
Lauderdale,  FL  33309.  Reference 
job  code  in  subject  line  of  e-mail  or 
in  written  response.  EEO/AA 
Employer 


Computer  -  Systems  Adm’r: 
resp  for  sys.  adm  &  apps  dev. 
Study  &  analyze  existing  sys, 
implement  changes.  BS  in  CS. 
MIS  or  any  eng'g  rel,  2  yrs. 
exp.  or  2  yrs.  exp  in  sys 
adm/analysis  rel.  Must  have 
working  knowledge  of  NIS, 
NFS  &  DNS.  Must  be  able  to 
work  on  Oracle  inst.  &  perform 
db  activities.  Multiple  pos  avail. 
Multiple  job  sites,  will  change  to 
other  unanticipated  sites  in  US 
as  req.  FT.  Send  res.  to 
Advansoft,  1807  Carraige  Ct, 
Addison,  I L  60101.  Legal  rt  to 
work  in  US  must  be  stated. 
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Microsoft 

by  developing  valued-added 
products  that  will  fall  under 
the  System  Center  banner. 

System  Center  will  combine 
Microsoft’s  two  main  manage¬ 
ment  offerings,  Systems  Man¬ 
agement  Server  and  Microsoft 
Operations  Manager.  A  suite 
that  bundles  them  is  due  next 
year,  and  the  fully  integrated 
product  is  targeted  for  2006  or 
later,  said  David  Hamilton,  di¬ 
rector  of  Microsoft’s  enter¬ 
prise  management  division. 

But  Microsoft  has  kept  its 
Web  services  management 
plans  under  wraps.  Hamilton 
said  Microsoft  has  been  meet¬ 
ing  with  customers  to  try  to 
get  an  understanding  of  their 
needs  in  that  area  and  assess 
how  those  needs  may  differ 
from  traditional  client/server 
management  issues. 

“Our  desire  is  really  to  try 
and  find  the  customer  pain 
point  before  we  jump  into  the 
middle  of  Web  services  man¬ 
agement,”  Hamilton  said.  He 
said  short-term  issues  may  be 
addressed  next  year  in  the 
System  Center  suite,  and  long¬ 
term  user  needs  will  be  tack¬ 
led  later  in  the  integrated 
product. 

Until  now,  small  vendors 
that  focus  on  varying  aspects 
of  Web  services  management 
have  done  much  of  the  cus¬ 
tomer  courting.  But  by  year’s 
end,  CA’s  Unicenter  Web  Ser¬ 
vices  Distributed  Management 
and  HP’s  OpenView  Web  Ser¬ 
vices  Management  Engine 
should  be  ready.  IBM’s  Tivoli 
division  and  BMC  Software 
Inc.  also  have  been  adding 
Web  services  capabilities  to 
existing  offerings. 

It’s  unclear  how  much  those 
vendors’  head  starts  will  hurt 
Microsoft.  An  IT  architect  at  a 
manufacturing  company  that 
has  been  building  Web  ser¬ 
vices  using  Microsoft  tools 
said  his  team  had  to  move 
ahead  with  products  that  are 
working  now.  He  said  he  will 


have  to  carefully  evaluate  Mi¬ 
crosoft’s  offerings. 

“The  real  question  will  be 
the  maturity.  The  start-ups  out 
there  are  really  galloping 
away,”  said  the  IT  architect, 
who  asked  not  to  be  identi¬ 
fied.  “But  everybody  is  at  least 
going  to  have  to  pay  attention 
to  what  Microsoft  offers. 
When  that  elephant  steps  in 
the  room,  it  doesn’t  matter 
how  many  mice  have  stepped 
in  the  room  before  [it].” 

Few  companies  have  built 
so  many  Web  services  that 
they  have  begun  seeking  tools 
to  manage  them.  Analysts  said 
demand  is  just  starting  to 
emerge,  and  they  don’t  expect 
it  to  become  widespread  for 
another  year  or  two. 

Christopher  Casgar,  a  senior 
architect  at  Wipro  Ltd.,  said 
the  firm’s  Newton,  Mass.- 


Continued  from  page  1 

Visa  Reform 

nization  for  the  Rights  of 
American  Workers  (TORAW) 
in  Meriden,  Conn.,  was 
formed  less  than  a  year  ago. 
One  of  the  group’s  founders, 
James  Pace,  a  laid-off  IT  con¬ 
sultant,  learned  the  ropes  of 
activism  in  the  early  1970s, 
when  he  fought  the  state’s  mo¬ 
torcycle  helmet  law.  “It  all 
comes  down  to  backyard  poli¬ 
tics,”  said  Pace. 

Among  other  activities, 
TORAW  attended  an  open  fo¬ 
rum  meeting  that  Rep.  Nancy 
Johnson  held  in  her  Connecti¬ 
cut  district  several  months 
ago.  Six  TORAW  members  in 
the  audience  peppered  John¬ 
son  with  questions  about  the 
visa  programs.  “We  took  over 
the  whole  meeting,”  said  Pace. 
Subsequent  local  newspaper 
coverage  focused  on  offshore 
outsourcing. 

On  July  28,  Johnson,  a  Re¬ 
publican,  joined  Democratic 
Sen.  Christopher  J.  Dodd  of 
Connecticut  in  sponsoring  the 
USA  Jobs  Protection  Act  to  re¬ 
form  the  visa  laws. 


based  NerveWire  division  has 
been  building  Web  services 
for  companies  in  the  financial, 
manufacturing  and  retail  in¬ 
dustries.  But  clients  are  just 
“kicking  the  tires”  when  it 
comes  to  Web  services  man¬ 
agement,  he  said. 

William  Norman,  assistant 
vice  president  of  research  and 
presentation  services  at  Op- 
penheimerFunds  Inc.  in  New 
York,  said  his  company  has 
found  the  management  capa¬ 
bilities  of  its  application  serv¬ 
er  from  BEA  Systems  Inc.  to 
be  sufficient  to  manage  its 
dozen  internal  Web  services. 

Likewise,  John  Morrison, 
CIO  at  Motor  Coach  Indus¬ 
tries  Inc.  in  Schaumberg,  Ill., 
said  his  company  uses  its  IBM 
WebSphere  application  server 
and  homegrown  tools  to  man¬ 
age  its  Web  services  and  has 


In  a  hearing  late  last 
month  on  the  L-l  visa, 

Dodd  said  that  from 
1997  to  2000,  some 
3.4  million  H-1B  and 
L-l  visas  were  ap¬ 
proved,  70,000  in  Con¬ 
necticut  alone.  Dodd 
said  a  growing  body  of 
anecdotal  evidence 
suggests  abuse. 

The  L-l  allows  com¬ 
panies  to  transfer  for¬ 
eign  employees  with 
specialized  skills  into 
the  U.S.  But  critics 
contend  the  program 
brings  in  foreign  re¬ 
placements  who  will 
be  trained  to  take  over 
IT  jobs  held  by  U.S.  citizens. 

The  HTB,  a  visa  that  lets 
firms  bring  skilled  workers 
into  the  U.S.  for  up  to  six  years, 
is  also  a  hot  issue.  But  its  cap 
will  shrink  from  195,000  to 
65,000  in  October;  the  L-l  has 
no  cap,  though  DeLauro’s  bill 
would  impose  a  35,000  limit. 

One  day  after  Dodd  and 
Johnson  introduced  their  bills, 
the  Information  Technology 
Association  of  America  re¬ 
leased  a  memorandum  sug¬ 
gesting  L-l  program  reforms, 


HP’s  OpenView  and  Tivoli 
products  for  overall  systems 
management.  He  said  he  does¬ 
n’t  see  the  management  of 
Web  services  as  separate  from 
other  management  needs. 

“The  ideal  world  is  that  they 
include  it  all  in  one  big  package 
and  keep  it  all  at  the  same 
price,”  Morrison  said.  “But  [of¬ 
fering]  separate  products  is  not 
bad,  depending  on  how  they’re 
going  to  license  and  price  it.” 

Carroll  Pleasant,  an  associ¬ 
ate  analyst  in  the  emerging 
technologies  group  at  East¬ 
man  Chemical  Co.  in  Kings¬ 
port,  Term.,  said  there’s  no 
consensus  about  what  a  Web 
services  management  tool 
should  do.  So  far,  his  company 
has  seen  a  need  to  manage  the 
security  model,  the  orchestra¬ 
tion  between  Web  services, 
the  debugging  and  monitoring 


including  the  visa’s  require¬ 
ment  that  employees  have 
some  “specialized  knowl¬ 
edge.”  The  ITAA  wants  a  more 
restrictive  definition  of  what 
specialized  knowledge  entails. 

Legislative  restrictions  such 
as  those  imposed  in  DeLauro’s 
bill  would  hurt  the  ability  of 
U.S.  firms  “to  move  people 
around  globally,”  said  Jeff 
Lande,  a  vice  president  at  the 
Arlington  Va.-based  ITAA. 

Offshore  work  is  a  hot  issue 
in  other  states  as  well,  but  Con- 


of  services,  fail-over  capabili¬ 
ties,  caching  and  data  transfor¬ 
mation.  But  Pleasant  said  he 
found  a  set  of  confusing  choic¬ 
es  from  small  start-ups  when 
he  looked  for  a  vendor. 

Corey  Ferengul,  an  analyst 
at  Meta  Group  Inc.,  said  the 
major  vendors  are  investing  in 
Web  services  management 
standards  before  they  make  a 
more  serious  foray  into  the 
space.  CA,  HP  and  IBM  are  all 
involved  in  work  with  the  Or¬ 
ganization  for  the  Advance¬ 
ment  of  Structured  Informa¬ 
tion  Standards. 

“We  haven’t  done  a  very 
good  job  of  managing  tradi¬ 
tional  client/server  applica¬ 
tions,”  said  Cameron  Haight, 
an  analyst  at  Gartner  Inc. 
“Now  Web  services  applica¬ 
tions  take  that  to  yet  another 
layer  of  complexity.”  I 


necticut  is  known  for 
its  high  wages  and  a 
heavy  concentration  of 
financial  services 
firms,  which  are  major 
offshore  users. 

Donald  Klepper- 
Smith,  chief  economist 
at  consulting  firm  Scil- 
lia  Dowling  and 
Natarelli  LLC  in  New 
Haven,  Conn.,  said 
Connecticut  employ¬ 
ers  face  a  cost  of  doing 
business  that’s  12% 
higher  than  the  nation¬ 
al  average.  The  state 
has  shed  46,000  jobs 
since  mid-2000,  out  of 
an  employment  base 
of  about  1.65  million.  “Basical¬ 
ly,  we’re  flat-lining  in  the  state 
of  Connecticut,”  he  said. 

Pace,  who  said  TORAW  co¬ 
founder  John  Bauman  also  de¬ 
serves  credit  for  the  group’s 
success,  realizes  that  the  pro¬ 
visions  in  some  of  the  bills 
won’t  appease  all  critics.  But 
the  chief  goal  is  to  get  legisla¬ 
tors  to  work  together.  Mean¬ 
while,  TORAW  is  recruiting 
members  outside  of  Connecti¬ 
cut.  “I  know  we  can  do  it  in 
other  states,”  said  Pace.  ► 
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FRANK  HAYES  ■  FRANKLY  SPEAKING 


Details,  Details . . . 


I  HEARD  RECENTLY  FROM  THE  SCO  GROUP’S  PR  director  about 
my  July  28  column  [“SCO’s  Shell  Game,”  QuickLink  40134]. 
“Your  article  was  all  correct  except  for  one  part,”  wrote  Blake 
Stowell.  “You  wrote  that  ‘[SCO]  threatened  darkly  that  if 
someone  didn’t  start  buying  Unix  licenses  soon,  it  would  sue 
Linus  Torvalds.’  That  phrase  comes  from  an  article  that  CBS  Market- 
Watch  published  a  few  months  back  after  doing  an  interview  with 
Dari  McBride,  president  and  CEO  of  SCO.  I  called  that  editor  back 
and  was  adamant  that  Dari  McBride  had  never  said  that. ...  He 
looked  back  over  his  notes  and  agreed  that  Dari  never  said  that  and 
made  a  correction  to  remove  that  phrase  or  sentence.” 

For  the  record,  MarketWatch.com  has  issued  no  such  correction, 


and  that  sentence  is  still  in  the  May  28  story  in 
the  archives  on  MarketWatch’s  Web  site. 

Still,  it’s  nice  to  know  SCO  agrees  that  every¬ 
thing  else  in  my  column  was  correct.  But  SCO 
seems  to  be  having  a  devil  of  a  time  getting  the 
details  right  lately. 

And  details  are  about  to  become  a  much  big¬ 
ger  issue  for  SCO,  now  that  Red  Hat  has  sued 
SCO  for  interfering  with  its  Linux  business  (see 
story,  page  14). 

Last  week  Red  Hat  asked  a  federal  court  to 
issue  a  declaratory  judgment  that  it  hasn’t  in¬ 
fringed  on  SCO’s  copyrights  or  trade  secrets. 

It’s  like  a  copyright  infringement  lawsuit  turned 
inside  out:  Instead  of  SCO’s  threatened  suits  to 
declare  Linux  users  guilty  of  infringement,  this 
is  a  suit  to  have  Linux  declared  innocent. 

Full  disclosure:  Two  Computerworld  columns 
I  wrote  are  quoted  in  the  Red  Hat  lawsuit,  as 
are  comments  from  analysts  at  Gartner,  Illumi- 
nata,  Deutsche  Bank  and  Merrill  Lynch.  How¬ 
ever,  I  have  no  legal,  financial  or  personal  con¬ 
nection  with  Red  Hat.  Its  lawyers 
haven’t  talked  to  me.  They  didn’t 
even  spell  my  name  right. 

But  I  can  already  guess  that  Red 
Hat’s  argument  will  go  like  this: 

None  of  the  code  in  Linux  is  ille¬ 
gally  similar  to  Unix  code. 

But  even  if  it  is  similar,  that  simi¬ 
larity  isn’t  the  result  of  copying. 

But  even  if  it  is  the  result  of  copy¬ 
ing,  the  code  wasn’t  copied  from 
Unix  source  code. 

But  even  if  it  was  copied  from 
Unix,  SCO  doesn’t  properly  own 
copyrights  for  Unix  source  code. 


But  even  if  SCO  does  own  the  Unix  copy¬ 
rights,  SCO  forfeited  control  of  any  code  in  Lin¬ 
ux  when  it  shipped  Linux  products  under  the 
General  Public  License  (GPL). 

But  even  if  SCO  didn’t  forfeit  that  control  un¬ 
der  the  GPL,  the  Unix  code  wasn’t  used  illegally 
because  the  generic  functions  it  implements 
aren’t  protected  by  copyright. 

That’s  a  lot  of  “even  ifs.”  And  if  that  sounds 
like  a  lot  of  weaselly  legalese  —  can’t  these 
guys  make  up  their  minds  on  an  argument?  — 
that’s  just  the  way  a  case  for  a  declaratory  judg¬ 
ment  is  structured.  Every  “even  if”  represents  a 
condition  that  must  be  met  for  there  to  be  copy¬ 
right  infringement. 

So  to  protect  its  infringement  claims,  SCO 
will  have  to  show  the  court  that  its  claims  can 
pass  every  one  of  those  “even  if”  tests. 

That  means  that  in  the  days  to  come,  we’ll  get 
lots  of  details  on  the  disputed  Linux  code  and 
SCO’s  legal  theories  —  details  that  have  been 
sorely  lacking  in  SCO’s  claims  over  the  past  six 
months  or  so. 

It  also  means  that  Linux  develop¬ 
ers  will  finally  have  an  opportunity 
to  learn  exactly  what  they’re  being 
accused  of  —  and  get  a  chance  to 
clean  it  up  to  make  Linux  street- 
legal.  Assuming  there  really  is  any 
Linux  code  that  infringes  on  Unix 
copyrights. 

That’s  probably  not  the  endgame 
SCO  would  prefer  —  it  won’t  help 
SCO’s  stock  price  at  all.  But  as  SCO 
hopes  to  cash  in  on  its  threats  to 
Linux,  the  devil  really  may  be  in 
the  details.  ft 


frank  hayes,  Computer- 
world's  senior  news  colum¬ 
nist.  has  covered  IT  for  more 
than  20  years.  Contact  him  at 
frank_hayes@computerwortd.com. 


It  Just  Never  Stops 

Why  is  this  print  queue  so  backed  up?  wonders  iT  pilot 
fish.  Turns  out  users  at  a  remote  site  have  made  the 
printer  vanish  from  the  network.  “When  we  called  them, 
they  explained  to  us  that  they  had  placed  the  discon¬ 
nected  printer  in  a  storage  closet,"  fish  groans.  “They 
thought  that  would  stop  the  printing  and  never  bothered 
to  call  IT  to  stop  transmitting  the  documents.” 


SHARK 

TANK* 


Big  electronics 
company  is 
building  a  fac¬ 
tory  for  a  joint 
venture.  But  the  locally 
hired  IT  manager  is  a 
little  fuzzy  on  some  de¬ 
tails,  says  a  pilot  fish 
working  there.  “The  gen¬ 
eral  manager  told  him  to 
build  a  raised  floor  in  the 
computer  room,”  fish 
sighs.  “A  month  later, 
we  saw  it  -  he  literally 
raised  the  floor  six  inch¬ 
es  by  pouring  a  cement 
slab  six  inches  thick.” 

Y2k  Plus  Three 

The  phones  for  this  state 
agency  go  down  almost 
daily,  so  pilot  fish  hunts 
down  the  cause.  “The 
phone  system  formerly 
belonged  to  the  state 
capitol,”  reports  fish. 
“They  got  rid  of  it  be¬ 
cause  it  wasn’t  Y2k- 
compatible.  And  it  still 
isn’t,  but  there’s  no 
money  to  replace  it.  So 
we  just  get  it  ‘fixed’  and 
working  on  a  temporary 
basis  -  each  and  every 
time  it  breaks.” 

Afraid  to  Ask? 

Big  publisher  is  well  into 
a  $50  million  system 
rewrite  when  consultant 
pilot  fish  arrives  -  briefly 
-  to  help.  “The  legacy 
system  was  very  old  and 
not  documented  at  all,” 
fish  reports.  “The  new 
system  was  still  in  de¬ 
sign.”  But  the  eight- 


member  con¬ 
version  team 
has  spent  a 
year  busily 
writing  pro¬ 
grams  to  convert  data 
from  the  old,  unknown 
system  to  the  new,  un¬ 
defined  system.  Fish 
sap,  “I  never  did  ask 
to  see  any  of  their  pro¬ 
grams  or  test  data.” 

But  How? 

Senior  VP  asks  IT  pilot 
fish  to  generate  a  data 
model  for  some  consul¬ 
tants.  Fish  explains  that 
he  has  the  company’s 
only  license  for  the  mod¬ 
eling  software,  which 
generates  a  proprietary 
file  format.  But  he  can 
provide  a  printout  of  the 
model.  “Fine,”  sap  the 
VP.  “But  perhaps  you 
could  e-mail  it  to  the 
consultants  as  well.” 

Aha! 

User  has  gotten  her  third 
replacement  monitor  in 
as  many  months,  so  sup¬ 
port  pilot  fish  checks  it 
out  -  and  finds  water 
under  the  monitor,  but 
no  source  of  a  leak.  The 
next  day,  he’s  walking  by 
and  catches  the  user's 
new  secretary  in  action. 
“I  explained  to  her  that 
watering  a  plant  on  top 
of  any  electronic  equip¬ 
ment  is  a  bad  idea,”  sap 
fish.  “And  that  maybe 
watering  an  artificial 
plant  wasn’t  the  best  use 
of  her  time  either.” 
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Got  Questions  About 
Business  Intelligence? 

Computerworld’s  IT  Executive  Summit 
Has  the  Answers 


If  you’re  an  IT  executive*  in  an  end-user  organization, 
apply  to  attend  one  of  Computerworld’s  upcoming 
complimentary  one-day  summits  on  Business  Intelligence. 

Neither  a  product  nor  a  system,  Business  Intelligence  (Bl) 
is  an  architecture  -  a  collection  of  interrelated  operational 
and  business  performance  measurement  applications 
and  databases. 

The  only  way  to  succeed  with  Bl  applications  is  to  under¬ 
stand  their  complexity,  their  cross-organizational  nature, 
the  needs  of  knowledge  workers,  your  competition,  your 
market,  and  customer  trends. 

This  summit  will  give  you  a  comprehensive,  one-day 
overview  -  and  will  arm  you  with  the  latest  thinking  and 
tools  to  make  the  right  investments  in  Bl. 


New  York  City 
September  23,  2003 

8:00am  to  3:00pm 

Hilton  New  York 

1335  Avenue  of  the  Americas 


San  Francisco 
September  25,  2003 

8:00am  to  3:00pm 

The  Fairmont  San  Francisco 

950  Mason  Street  (Nob  Hill) 


Why  you  should  attend 

•  A  rich  program  focused  solely  on  Business  Intelligence 

•  Emceed  by  Maryfran  Johnson,  Editor  in  Chief 

•  Peer  networking  time  during  breakfast  and  lunch 

•  Case  studies  delivered  by  IT-user  executives  who 
have  successfully  implemented  Business  Intelligence 

•  Perspectives  from  author  and  expert  Shaku  Atre 

•  Panel  of  IT-user  executives  sharing  real-life  experiences 


Apply  for  registration  today 

For  more  information  or  to  apply,  visit 
www.itexecutivesummit.com/bi 


Exclusively  sponsored  by: 

5sa s.  inU 


COMPUTERWORLD 

»•••«  IT  Executive  Summit 

*  on  Business  Intelligence 

www.itexecutivesummit.com/bi 


Oracle 

42,000  Employees 

3  Oracle  Email  Database  Servers 


Microsoft 

50,000  Employees 

110  Microsoft  Exchange  Servers 

Source:  Microsoft  CIO 
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REGISTER  NOW  AND  SAVE 
September  7-11,  2003 
San  Francisco,  California 
oracle.com/oracleworld 
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Unless  you  have  as  much  money  as  Microsoft, 
you  may  want  to  use  Oracle  for  email 


Source  for  Microsoft  Data: 

Keynote  presentation  by  Microsoft  CIO 

at  NRFtech  IT  Leadership  Summit  on  August  12,  2002 


oracle.com/email 
or  call  1.800.633.0541 
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